Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-62503
4.6
MEDIUMCVSS v3
Published
October 30, 2025
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action.
apache/airflow
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflows
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflows>= 3.0.0, < 3.1.1NVD