Defined in 2 files
Last patched
get_user_from_token in apache/airflow was changed by 2 published CVE fixes in 2026, in 2 distinct patches that added or removed 11 lines in total.
The name occurs in 2 files: providers/keycloak/src/airflow/providers/keycloak/auth_manager/keycloak_auth_manager.py, airflow-core/src/airflow/api_fastapi/auth/managers/base_auth_manager.py.
apache/airflow has 200 CVEs with a located fix in total, so 1% of them touched this function.
Every published CVE whose fix changed get_user_from_token, newest first, with the lines each fix touched.
CVE-2026-76186 · providers/keycloak/src/airflow/providers/keycloak/auth_manager/keycloak_auth_manager.py · lines 178–185 · +8 −0
CVE-2025-57735 · airflow-core/src/airflow/api_fastapi/auth/managers/base_auth_manager.py · lines 148–150 · +3 −0
Get an alert when the next CVE fix lands in apache/airflow, with the patched functions.
Monitor airflow CVEsFunctions in the same files that CVE fixes also changed.
Functions in apache/airflow changed by the most CVE fixes.
Common questions about CVE fixes to get_user_from_token.
Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.
Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.
