← All credits
Apache Airflow security team
4 vulnerability records and advisories credit this contributor.
CVE-2026-68872
Apache Airflow Amazon provider: amazon SSM / Secrets Manager backends: team-scope guard bypass resolves another team's Connection or Variable
CVE-2026-68871
Apache Airflow Yandex provider: yandex Lockbox backend: team-scope guard bypass resolves another team's Connection or Variable
CVE-2026-68870
Apache Airflow Microsoft Azure provider: microsoft.azure Key Vault backend: team-scope guard bypass resolves another team's Connection or Variable
CVE-2026-68868
Apache Airflow Google provider: google Secret Manager backend: team scope is never applied, exposing every team's Connections and Variables