← All credits
Kevin Yang
4 vulnerability records and advisories credit this contributor.
CVE-2026-38743
Apache Airflow: Dags endpoint might provide access to otherwise inaccessible entities
CVE-2026-30898
Apache Airflow: Bad example of BashOperator shell injection via dag_run.conf
CVE-2026-32690
Apache Airflow: 3.x - Nested Variable Secret Values Bypass Redaction via max_depth=1
CVE-2026-34538
Apache Airflow: Authorization bypass in DagRun wait endpoint (XCom exposure)