https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 10 Nov 2026 05:42:36 +0000 https://db.gcve.eu/vuln/cve-2026-76185 <p><strong>Affected:</strong> Apache Software Foundation Apache Airflow Task SDK</p> <p>Apache Airflow&#39;s Task SDK secret cache built its keys from the team name and secret id with unescaped `_` delimiters, so different (team, secret id) pairs could collide. In multi-team deployments a Dag author could read another team&#39;s Variable or Connection value by crafting a colliding secret id. Only deployments with both `core.multi_team = True` and `secrets.use_cache = True` are affected.</p> <p>Users are advised to upgrade to apache-airflow 3.4.0 or later. Deployments that cannot upgrade can set `secrets.use_cache = False`.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Airflow Task SDK</p> <p>Apache Airflow&#39;s Task SDK secret cache built its keys from the team name and secret id with unescaped `_` delimiters, so different (team, secret id) pairs could collide. In multi-team deployments a Dag author could read another team&#39;s Variable or Connection value by crafting a colliding secret id. Only deployments with both `core.multi_team = True` and `secrets.use_cache = True` are affected.</p> <p>Users are advised to upgrade to apache-airflow 3.4.0 or later. Deployments that cannot upgrade can set `secrets.use_cache = False`.</p> https://db.gcve.eu/vuln/cve-2026-76185