You are viewing a plain text version of this content. The canonical link for it is here.
- [ANNOUNCE] Apache Airflow 3.2.0 Released - posted by Rahul Vats <ra...@gmail.com> on 2026/04/07 14:36:39 UTC, 1 replies.
- CVE-2026-34538: Apache Airflow: Authorization bypass in DagRun wait endpoint (XCom exposure) - posted by Rahul Vats <ra...@apache.org> on 2026/04/09 08:57:57 UTC, 0 replies.
- CVE-2025-57735: Apache Airflow: Airflow Logout Not Invalidating JWT - posted by Rahul Vats <ra...@apache.org> on 2026/04/09 11:07:53 UTC, 0 replies.
- 🤠Meetup in Austin TX! Warming up for Airflow Summit 2026 - posted by Teyza Ponce <te...@sg.com.mx> on 2026/04/10 15:31:06 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on 2026-04-08 are released - posted by Jarek Potiuk <ja...@potiuk.com> on 2026/04/12 18:47:47 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Python Client 3.2.0 Released - posted by Rahul Vats <ra...@gmail.com> on 2026/04/13 12:36:24 UTC, 0 replies.
- CVE-2025-66236: Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI - posted by Rahul Vats <ra...@apache.org> on 2026/04/13 14:18:01 UTC, 0 replies.
- CVE-2026-33858: Apache Airflow: Unsafe Deserialization via Legacy Serialization Keys (__type/__var) Bypass in XCom API - posted by Rahul Vats <ra...@apache.org> on 2026/04/13 14:21:22 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on 2026-04-12 are released - posted by Jarek Potiuk <ja...@potiuk.com> on 2026/04/14 00:28:27 UTC, 0 replies.
- CVE-2025-54550: Apache Airflow: RCE by race condition in example_xcom dag - posted by Jarek Potiuk <po...@apache.org> on 2026/04/15 00:17:07 UTC, 0 replies.
- CVE-2026-25219: Apache Airlfow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access - posted by Jarek Potiuk <po...@apache.org> on 2026/04/15 11:31:58 UTC, 0 replies.
- CVE-2026-31987: Apache Airflow: JWT token appearing in logs - posted by Rahul Vats <ra...@apache.org> on 2026/04/16 13:30:05 UTC, 0 replies.
- CVE-2026-30912: Apache Airflow: Exposing stack trace in case of constraint error - posted by Rahul Vats <ra...@apache.org> on 2026/04/17 10:15:40 UTC, 0 replies.
- CVE-2026-32690: Apache Airflow: 3.x - Nested Variable Secret Values Bypass Redaction via max_depth=1 - posted by Rahul Vats <ra...@apache.org> on 2026/04/17 10:24:10 UTC, 0 replies.
- CVE-2026-30898: Apache Airflow: Bad example of BashOperator shell injection via dag_run.conf - posted by Rahul Vats <ra...@apache.org> on 2026/04/17 10:28:55 UTC, 0 replies.
- CVE-2026-32228: Apache Airflow: Users with asset materialization permisssions could trigger Dags they had no access to - posted by Rahul Vats <ra...@apache.org> on 2026/04/17 10:31:25 UTC, 0 replies.
- CVE-2026-25917: Apache Airflow: API extra-links triggers XCom deserialization/class instantiation (Airflow 3.1.5) - posted by Rahul Vats <ra...@apache.org> on 2026/04/17 10:34:42 UTC, 0 replies.
- CVE-2026-40948: Apache Airflow Keycloak Provider: OAuth Login CSRF — Missing State Parameter in Keycloak Auth Manager - posted by Jarek Potiuk <po...@apache.org> on 2026/04/17 17:00:40 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow 3.2.1 Released - posted by Rahul Vats <ra...@gmail.com> on 2026/04/22 09:10:57 UTC, 0 replies.
- CVE-2026-38743: Apache Airflow: Dags endpoint might provide access to otherwise inaccessible entities - posted by Rahul Vats <ra...@apache.org> on 2026/04/24 12:19:59 UTC, 0 replies.
- CVE-2026-40690: Apache Airflow: Assets graph view bypasses DAG level access control displaying unrelated topologies and all DAGs names to unauthorized users - posted by Rahul Vats <ra...@apache.org> on 2026/04/24 12:24:03 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Helm Chart version 1.21.0 Released - posted by Buğra Öztürk <oz...@gmail.com> on 2026/04/24 20:46:41 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Python Client 3.2.1 Released - posted by Rahul Vats <ra...@gmail.com> on 2026/04/27 12:42:12 UTC, 0 replies.
- CVE-2026-41016: Apache Airflow SMTP Provider: No certificate validation on SMTP STARTTLS connections - posted by Shahar Epstein <sh...@apache.org> on 2026/04/27 18:32:23 UTC, 0 replies.
- 💌 Airflow Summit 2026 - Confirmed sessions 👀 - posted by Teyza Ponce <te...@sg.com.mx> on 2026/04/28 14:50:30 UTC, 0 replies.