Andrew Rukin (Arenadata)

Apache Airflow Teradata provider: SQL injection via unvalidated Dag Params in the compute-cluster example Dag

Apache Airflow: Connections test API: team-scope guard bypass resolves another team's environment Connection

Apache Airflow: Config API: team-scoped Celery broker secret disclosed to a Viewer (multi-team masking bypass)

Apache Airflow: Task-instance API exposes secrets in deferred trigger kwargs

Apache Airflow FTP provider: FTP Provider does not protect FTPS data channel (missing PROT_P)

Apache Impala: SAML authentication bypass via forged bearer token

Apache Hive: Unauthenticated authentication bypass in HiveServer2 HTTP SAML bearer-token validation allows impersonation of any Hive user

Apache Ranger: Remote Code Execution via JDBC URL Injection

Apache Ranger: Privilege Escalation via URL Parameter

Apache Ranger: Remote Code Execution via Arbitrary Class Instantiation