Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-13594 |
9.1 (3.1)
|
Improper Access Control vulnerability |
Zohocorp |
Log360 |
2026-11-03T07:29:10.038Z | 2026-11-03T07:29:10.038Z |
| CVE-2026-120988 |
N/A
|
billboard.js before 4.1.3 allows an attacker to e… |
NAVER |
billboard.js |
2026-11-03T07:15:35.191Z | 2026-11-03T07:15:35.191Z |
| CVE-2025-54550 |
8.1 (3.1)
|
Apache Airflow: RCE by race condition in example_xcom dag |
Apache Software Foundation |
Apache Airflow |
2026-04-15T00:22:03.305Z | 2026-11-03T07:01:21.033Z |
| CVE-2026-86473 |
9.1 (3.1)
|
Apache Airflow: Logout ignores a presented Authorizati… |
Apache Software Foundation |
Apache Airflow |
2026-09-21T14:33:26.110Z | 2026-11-03T07:00:53.240Z |
| CVE-2026-82355 |
4.2 (3.1)
|
Apache Airflow: Session cookie silently overrides expl… |
Apache Software Foundation |
Apache Airflow |
2026-09-21T14:32:04.932Z | 2026-11-03T07:00:47.198Z |
| CVE-2026-75158 |
4.3 (3.1)
|
Apache Airflow: Assets events API returns asset events… |
Apache Software Foundation |
Apache Airflow |
2026-09-21T14:32:47.818Z | 2026-11-03T07:00:41.233Z |
| CVE-2026-75157 |
7.5 (3.1)
|
Apache Airflow: Asset queued-events DELETE endpoints g… |
Apache Software Foundation |
Apache Airflow |
2026-09-18T07:51:23.246Z | 2026-11-03T07:00:34.737Z |
| CVE-2026-68971 |
6.5 (3.1)
|
Apache Airflow: Cross-team authorization bypass in the… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:24:10.679Z | 2026-11-03T07:00:28.577Z |
| CVE-2026-68970 |
6.5 (3.1)
|
Apache Airflow: Values of a list-shaped Variable are n… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:24:53.217Z | 2026-11-03T07:00:22.374Z |
| CVE-2026-68969 |
6.5 (3.1)
|
Apache Airflow: Bulk Variable and Connection endpoints… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:26:40.095Z | 2026-11-03T07:00:16.212Z |
| CVE-2026-68968 |
7.5 (3.1)
|
Apache Airflow: Authorization bypass in the Backfill A… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:27:46.731Z | 2026-11-03T07:00:06.532Z |
| CVE-2026-68076 |
5.4 (3.1)
|
Apache Airflow: Connections test API: team-scope guard… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:23:22.930Z | 2026-11-03T06:59:58.489Z |
| CVE-2026-67587 |
8.8 (3.1)
|
Apache Airflow: DAG-author remote code execution on th… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:32:10.565Z | 2026-11-03T06:59:15.615Z |
| CVE-2026-67260 |
7.3 (3.1)
|
Apache Airflow: DAG-author remote code execution on th… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:33:02.858Z | 2026-11-03T06:59:09.280Z |
| CVE-2026-65017 |
6.5 (3.1)
|
Apache Airflow: Config API: team-scoped Celery broker … |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:31:26.092Z | 2026-11-03T06:59:03.183Z |
| CVE-2026-59244 |
6.5 (3.1)
|
Apache Airflow: Secrets masker: `var.json` Variable va… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:43:17.373Z | 2026-11-03T06:58:57.180Z |
| CVE-2026-59242 |
5.4 (3.1)
|
Apache Airflow: Arbitrary airflow.* class instantiatio… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:35:00.763Z | 2026-11-03T06:58:51.061Z |
| CVE-2026-58076 |
8.8 (3.1)
|
Apache Airflow: Unguarded import_string() of airflow_e… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:40:59.934Z | 2026-11-03T06:58:44.859Z |
| CVE-2026-54183 |
4.3 (3.1)
|
Apache Airflow: Airflow Variables were not masked in t… |
Apache Software Foundation |
Apache Airflow |
2026-08-12T15:34:22.966Z | 2026-11-03T06:58:38.940Z |
| CVE-2026-49487 |
6.5 (3.1)
|
Apache Airflow: Task-instance API exposes secrets in d… |
Apache Software Foundation |
Apache Airflow |
2026-07-07T09:19:36.710Z | 2026-11-03T06:58:32.490Z |
| CVE-2026-49296 |
6.5 (3.1)
|
Apache Airflow: Per-DAG read bypass discloses co-locat… |
Apache Software Foundation |
Apache Airflow |
2026-07-07T09:18:12.369Z | 2026-11-03T06:57:54.406Z |
| CVE-2026-49267 |
5.9 (3.1)
|
Apache Airflow: No certificate validation on SMTP STAR… |
Apache Software Foundation |
Apache Airflow |
2026-06-01T07:53:13.259Z | 2026-11-03T06:57:48.147Z |
| CVE-2026-48892 |
6.5 (3.1)
|
Apache Airflow: Config API leaks per-key secrets backe… |
Apache Software Foundation |
Apache Airflow |
2026-07-07T09:16:26.466Z | 2026-11-03T06:57:41.989Z |
| CVE-2026-48891 |
4.3 (3.1)
|
Apache Airflow: /ui/dependencies scheduling graph leak… |
Apache Software Foundation |
Apache Airflow |
2026-07-07T09:17:28.748Z | 2026-11-03T06:57:35.748Z |
| CVE-2026-48828 |
6.5 (3.1)
|
Apache Airflow: Bulk JSON Variables bypass should_hide… |
Apache Software Foundation |
Apache Airflow |
2026-07-07T09:18:53.833Z | 2026-11-03T06:57:29.376Z |
| CVE-2026-48726 |
6.5 (3.1)
|
Apache Airflow: revoke_token() unreachable in FabAuthM… |
Apache Software Foundation |
Apache Airflow |
2026-06-01T07:35:19.270Z | 2026-11-03T06:57:24.307Z |
| CVE-2026-46764 |
4.3 (3.1)
|
Apache Airflow: Event Log detail endpoint bypasses DAG… |
Apache Software Foundation |
Apache Airflow |
2026-06-01T07:45:48.288Z | 2026-11-03T06:57:17.602Z |
| CVE-2026-45426 |
3.1 (3.1)
|
Apache Airflow: Log server JWT authorization bypass vi… |
Apache Software Foundation |
Apache Airflow |
2026-06-01T07:47:16.636Z | 2026-11-03T06:57:11.563Z |
| CVE-2026-45360 |
7.3 (3.1)
|
Apache Airflow: Arbitrary import in custom deadline-re… |
Apache Software Foundation |
Apache Airflow |
2026-06-01T07:48:13.287Z | 2026-11-03T06:56:33.203Z |
| CVE-2026-45192 |
6.5 (3.1)
|
Apache Airflow: Incomplete Redaction of Sensitive Fiel… |
Apache Software Foundation |
Apache Airflow |
2026-06-01T06:51:41.026Z | 2026-11-03T06:56:27.147Z |