Known vulnerabilities in Apache Airflow - page 2

Software CPE: cpe:2.3:a:apache_foundation:apache_airflow:*:*:*:*:*:*:*:*
Total vulnerabilities: 114
Public exploits: 4
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Airflow Apache Airflow is affected by 114 known vulnerabilities: 8 high, 28 medium, 78 low Critical High Medium Low

Vulnerabilities (114)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144884 - Improper Access Control
CVE-2026-68076
CWE-284 Low
No
No
3.3.1 24.08.2026 SB20260824160
#VU144883 - Improper Authorization
CVE-2026-68971
CWE-285 Low
No
No
3.3.1 24.08.2026 SB20260824160
#VU144881 - Information Exposure Through Log Files
CVE-2026-68970
CWE-532 Low
No
No
3.3.1 24.08.2026 SB20260824160
#VU144880 - Information Exposure Through Log Files
CVE-2026-68969
CWE-532 Low
No
No
3.3.1 24.08.2026 SB20260824160
#VU144879 - Incorrect Authorization
CVE-2026-68968
CWE-863 Low
No
No
3.3.1 24.08.2026 SB20260824160
#VU144878 - Exposure of sensitive information to an unauthorized actor
CVE-2026-65017
CWE-200 Low
No
No
3.3.1 24.08.2026 SB20260824160
#VU144877 - Deserialization of Untrusted Data
CVE-2026-67587
CWE-502 Medium
No
No
3.3.1 24.08.2026 SB20260824160
#VU144876 - Deserialization of Untrusted Data
CVE-2026-67260
CWE-502 Medium
No
No
3.3.1 24.08.2026 SB20260824160
#VU144875 - Exposure of sensitive information to an unauthorized actor
CVE-2026-54183
CWE-200 Low
No
No
3.3.1 24.08.2026 SB20260824160
#VU144869 - Exposure of sensitive information to an unauthorized actor
CVE-2026-48892
CWE-200 Low
No
No
3.3.0 24.08.2026 SB20260824159
#VU144868 - Exposure of sensitive information to an unauthorized actor
CVE-2026-48891
CWE-200 Low
No
No
3.3.0 24.08.2026 SB20260824159
#VU144867 - Incorrect Authorization
CVE-2026-49296
CWE-863 Low
No
No
3.3.0 24.08.2026 SB20260824159
#VU144864 - Exposure of sensitive information to an unauthorized actor
CVE-2026-49487
CWE-200 Low
No
No
3.3.0 24.08.2026 SB20260824159
#VU144863 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-33264
CWE-94 Medium
No
No
3.3.0 24.08.2026 SB20260824159
#VU133379 - Improper Access Control
CVE-2026-41084
CWE-284 Low
No
No
3.2.2 04.06.2026 SB2026060498
#VU133378 - Improper Certificate Validation
CVE-2026-49267
CWE-295 Medium
No
No
3.2.2 04.06.2026 SB2026060498
#VU133377 - Improper Access Control
CVE-2026-41014
CWE-284 Low
No
No
3.2.2 04.06.2026 SB2026060498
#VU133376 - Improper Access Control
CVE-2026-40963
CWE-284 Low
No
No
3.2.2 04.06.2026 SB2026060498
#VU133375 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-40961
CWE-601 Low
No
No
3.2.2 04.06.2026 SB2026060498
#VU133374 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-40861
CWE-59 Low
No
No
3.2.2 04.06.2026 SB2026060498


Showing elements 21 - 40 out of 114