Apache Software Foundation airflow Vulnerabilities
CVE security advisories and vulnerability history for airflow by Apache Software Foundation.
183
Total CVEs
Published
2
In CISA KEV
Exploited in the wild
10
Public exploits
PoC or exploit code
6.9
Avg CVSS
2018–2026
Last updated
Overview
Apache Software Foundation airflow has 183 published CVE records since 2018, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 10 have a known public exploit. The average CVSS base score across scored CVEs is 6.9.
This page aggregates every publicly disclosed vulnerability (CVE) affecting Apache Software Foundation airflow, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of Apache Software Foundation airflow's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical23
High66
Medium86
Low8
In CISA’s Known Exploited Vulnerabilities catalog
2
2 of Apache Software Foundation airflow's CVEs are confirmed exploited in the wild.
Public exploits
10
10 of Apache Software Foundation airflow's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every Apache Software Foundation airflow version named in a CVE, then pick one to see only the CVEs that affect it.
Common questions about Apache Software Foundation airflow vulnerabilities.
How many CVEs does Apache Software Foundation airflow have?
Apache Software Foundation airflow has 183 published CVE records since 2018.
How many Apache Software Foundation airflow CVEs are in CISA KEV?
Yes — 2 of Apache Software Foundation airflow's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Apache Software Foundation airflow vulnerabilities?
Yes — 10 of Apache Software Foundation airflow's CVEs have a known public exploit.
Which versions of Apache Software Foundation airflow are affected?
9,402 distinct Apache Software Foundation airflow versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Apache Software Foundation airflow CVEs?
Apache Software Foundation airflow's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-20 (Improper Input Validation), CWE-532 (Insertion of Sensitive Information into Log File), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).
How many critical Apache Software Foundation airflow vulnerabilities are there?
Apache Software Foundation airflow has 23 critical and 66 high-severity CVEs.
What is the average severity of Apache Software Foundation airflow CVEs?
The average CVSS base score across Apache Software Foundation airflow's scored CVEs is 6.9.
RadicalNotion.AI