You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@security.apache.org by "potiuk (via GitHub)" <gi...@apache.org> on 2026/10/16 03:52:39 UTC
[PR] Add Airflow advisories CVE-2026-92228, CVE-2026-94134, CVE-2026-94135 and CVE-2026-96806 [security-site]
potiuk opened a new pull request, #119:
URL: https://github.com/apache/security-site/pull/119
Adds the four Apache Airflow advisories announced on 2026-10-15 to the Airflow project page:
- CVE-2026-92228: Keycloak multi-team provisioning grants every team role global audit-log read
- CVE-2026-94134: SSH hook disables host-key verification by default
- CVE-2026-94135: Async SFTP hook disables host-key verification by default
- CVE-2026-96806: Keycloak auth manager: logout does not invalidate the session
Generated with `scripts/project-page.py` from fresh cveprocess data. Only the Airflow page and the eight new CVE/OSV JSON files are included; no other Airflow entry changes, and other projects are left for the regular regeneration.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@security.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Add Airflow advisories CVE-2026-92228, CVE-2026-94134, CVE-2026-94135 and CVE-2026-96806 [security-site]
Posted by "potiuk (via GitHub)" <gi...@apache.org>.
potiuk merged PR #119:
URL: https://github.com/apache/security-site/pull/119
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@security.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org