← All credits
Saurabh Banawar
7 vulnerability records and advisories credit this contributor.
CVE-2025-66236
Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI
CVE-2026-25219
Apache Airflow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access
CVE-2025-57735
Apache Airflow: Airflow Logout Not Invalidating JWT
CVE-2025-3415
Grafana is an open-source platform for monitoring and observability. The Grafana Alerting DingDing integration was not properly protected and could be exposed to users with Viewer permission.
Fixed in versions 10.4.19+security-01, 11.2.10+security-01, 11
CVE-2024-45033
Apache Airflow Fab Provider: Application does not invalidate session after password change via Airflow cli
CVE-2024-45784
Apache Airflow: Sensitive configuration values are not masked in the logs by default
CVE-2024-50378
Apache Airflow: Secrets not masked in UI when sensitive variables are set via Airflow cli