Defined in 2 files
Last patched
login_callback in apache/airflow was changed by 3 published CVE fixes in 2026, in 5 distinct patches that added or removed 32 lines in total.
The name occurs in 2 files: providers/keycloak/src/airflow/providers/keycloak/auth_manager/routes/login.py, providers/amazon/src/airflow/providers/amazon/aws/auth_manager/routes/login.py.
apache/airflow has 200 CVEs with a located fix in total, so 2% of them touched this function.
Every published CVE whose fix changed login_callback, newest first, with the lines each fix touched.
CVE-2026-40948 · providers/keycloak/src/airflow/providers/keycloak/auth_manager/routes/login.py · lines 82–85 · +4 −0
CVE-2025-57735 · providers/amazon/src/airflow/providers/amazon/aws/auth_manager/routes/login.py · lines 105–110 · +6 −1
CVE-2025-57735 · providers/keycloak/src/airflow/providers/keycloak/auth_manager/routes/login.py · lines 74–79 · +6 −1
CVE-2026-28779 · providers/amazon/src/airflow/providers/amazon/aws/auth_manager/routes/login.py · lines 112–116 · +3 −2
CVE-2026-28779 · providers/keycloak/src/airflow/providers/keycloak/auth_manager/routes/login.py · lines 98–108 · +6 −3
Get an alert when the next CVE fix lands in apache/airflow, with the patched functions.
Monitor airflow CVEsFunctions in the same files that CVE fixes also changed.
Functions in apache/airflow changed by the most CVE fixes.
Common questions about CVE fixes to login_callback.
Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.
Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.
