https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T05:29:46.223375+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-107474 fkie_cve-2026-107474 2026-11-10T05:29:46.226353+00:00

The Apache Airflow connections API did not mask the apprise provider's `config` connection extra, which can embed notification-service credentials. A user with permission to read connections could retrieve it in cleartext, although Airflow 3 treats connection credentials as write-only.

Users are advised to upgrade to apache-airflow 3.4.0 or later. Airflow 2.x is also affected; Airflow 2 has reached end of life and will not receive a fix, so Airflow 2 users should upgrade to Apache Airflow 3.4.0 or later.

 https://db.gcve.eu/vuln/ghsa-59x3-x3hh-x23q GHSA-59x3-x3hh-x23q 2026-11-10T05:29:46.226423+00:00

The Apache Airflow connections API did not mask the apprise provider's `config` connection extra, which can embed notification-service credentials. A user with permission to read connections could retrieve it in cleartext, although Airflow 3 treats connection credentials as write-only.

Users are advised to upgrade to apache-airflow 3.4.0 or later.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4401 WID-SEC-W-2026-4401 — Apache Airflow: Mehrere Schwachstellen 2026-11-10T05:29:46.226445+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache Airflow ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen sowie Daten zu manipulieren oder offenzulegen.