Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-32228
7.5
HIGHCVSS v3
Published
April 18, 2026
Affected
2 projects
Assigned by
Apache
Severity scale
010
Description
UI / API User with asset materialize permission could trigger dags they had no access to. Users are advised to migrate to Airflow version 3.2.0 that fixes the issue.
apache/airflow
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflows
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflows>= 3.0.0, < 3.2.0NVD
Docker Hub