How many Apache Software Foundation airflow CVEs are in CISA KEV?

Yes — 2 of Apache Software Foundation airflow's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Apache Software Foundation airflow are affected?

9,894 distinct Apache Software Foundation airflow versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Apache Software Foundation airflow CVEs?

Apache Software Foundation airflow's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-20 (Improper Input Validation), CWE-502 (Deserialization of Untrusted Data).

How many critical Apache Software Foundation airflow vulnerabilities are there?

Apache Software Foundation airflow has 31 critical and 74 high-severity CVEs.

What is the average severity of Apache Software Foundation airflow CVEs?

The average CVSS base score across Apache Software Foundation airflow's scored CVEs is 6.9.

Apache Software Foundation airflow Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Apache Software Foundation airflow vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Apache Software Foundation airflow Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Apache Software Foundation airflow has 222 published CVE records since 2018, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 7 have a known public exploit. The average CVSS base score across scored CVEs is 6.9.

Severity and exploitation

How the CVSS severity of Apache Software Foundation airflow's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical31

High74

Medium109

Low8

In CISA’s Known Exploited Vulnerabilities catalog

2 of Apache Software Foundation airflow's CVEs are confirmed exploited in the wild.

Public exploits

7 of Apache Software Foundation airflow's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Apache Software Foundation airflow version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

providers-airbyte/2.0.0143 CVEs
providers-amazon/2.0.0143 CVEs
providers-apache-beam/3.0.0143 CVEs
providers-apache-cassandra/2.0.0143 CVEs
providers-apache-druid/2.0.0143 CVEs
providers-apache-hdfs/2.0.0143 CVEs
providers-apache-hive/2.0.0143 CVEs
providers-apache-kylin/2.0.0143 CVEs
providers-apache-livy/2.0.0143 CVEs
providers-apache-pig/2.0.0143 CVEs

Common weakness types

The CWE weakness categories most often found in Apache Software Foundation airflow CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Apache Software Foundation airflow CVEs were published each year.

2018

2019

2020

2021

2022

2023

2024

Other Apache Software Foundation products

Browse vulnerabilities for other products by Apache Software Foundation.

http server371 CVEs tomcat278 CVEs Apache Airflow152 CVEs apache-airflow145 CVEs Apache HTTP Server145 CVEs Apache Tomcat138 CVEs httpd125 CVEs traffic server121 CVEs

Frequently asked questions

Common questions about Apache Software Foundation airflow vulnerabilities.

How many CVEs does Apache Software Foundation airflow have?: Apache Software Foundation airflow has 222 published CVE records since 2018.
How many Apache Software Foundation airflow CVEs are in CISA KEV?: Yes — 2 of Apache Software Foundation airflow's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Apache Software Foundation airflow vulnerabilities?: Yes — 7 of Apache Software Foundation airflow's CVEs have a known public exploit.
Which versions of Apache Software Foundation airflow are affected?: 9,894 distinct Apache Software Foundation airflow versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Apache Software Foundation airflow CVEs?: Apache Software Foundation airflow's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-20 (Improper Input Validation), CWE-502 (Deserialization of Untrusted Data).
How many critical Apache Software Foundation airflow vulnerabilities are there?: Apache Software Foundation airflow has 31 critical and 74 high-severity CVEs.
What is the average severity of Apache Software Foundation airflow CVEs?: The average CVSS base score across Apache Software Foundation airflow's scored CVEs is 6.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Apache Software Foundation airflow vulnerabilities

Get an alert for each new Apache Software Foundation airflow CVE, with AI-written analysis and remediation steps.

Create an account See pricing

Version ranges

< 3.2.28 CVEs
< 3.3.18 CVEs
< 1.10.116 CVEs
< 3.3.06 CVEs
3.0.0 <= v < 3.2.06 CVEs
< 2.6.35 CVEs
< 3.2.05 CVEs
3.0.0 <= v < 3.2.25 CVEs
< 2.3.04 CVEs
<= 1.10.104 CVEs
3.3.0 <= v < 3.3.14 CVEs
< 2.11.13 CVEs
< 2.4.23 CVEs
< 2.6.03 CVEs
< 2.7.23 CVEs
< 2.7.33 CVEs
<= 1.8.23 CVEs
2.0.0 <= v < 2.0.23 CVEs
3.0.0 <= v < 3.1.83 CVEs
3.2.0 <= v < 3.2.23 CVEs
< 1.10.132 CVEs
< 1.10.152 CVEs
< 2.10.32 CVEs
< 2.2.42 CVEs
< 2.7.02 CVEs
< 2.7.12 CVEs
< 2.8.02 CVEs
< 2.8.12 CVEs
< 2.8.22 CVEs
< 3.2.12 CVEs
<= 1.10.22 CVEs
2.0.0 <= v < 2.0.12 CVEs
2.0.0 <= v <= 2.0.02 CVEs
2.3.0 <= v < 2.3.52 CVEs
2.3.0 <= v <= 2.3.42 CVEs
3.0.0 <= v < 3.1.12 CVEs
< 1.10.11 CVE
< 1.10.141 CVE
< 1.10.21 CVE
< 1.10.51 CVE
< 1.10.61 CVE
< 1.9.01 CVE
< 2.1.21 CVE
< 2.10.01 CVE
< 2.10.11 CVE
< 2.3.11 CVE
< 2.3.41 CVE
< 2.4.01 CVE
< 2.4.31 CVE
< 2.5.11 CVE
< 2.5.21 CVE
< 2.9.21 CVE
< 2.9.31 CVE
< 3.1.61 CVE
< 3.1.71 CVE
< 3.1.81 CVE
< 3.3.21 CVE
<= 1.10.51 CVE
<= 2.2.31 CVE
<= 2.4.11 CVE
<= 2.7.01 CVE
<= 2.9.0-beta11 CVE
<= 2.9.0-beta21 CVE
>= 2.10.01 CVE
>= 2.9.01 CVE
>= 3.7.01 CVE
>= Apache Airflow <= 1.10.41 CVE
1.0.0 <= v < 1.10.151 CVE
1.10.0 <= v < 1.10.11 CVE
1.10.0 <= v < 2.7.01 CVE
1.10.0 <= v <= 1.10.01 CVE
1.10.0 <= v <= 1.10.151 CVE
2.0.0 <= v < 2.1.31 CVE
2.0.0 <= v < 2.2.01 CVE
2.0.0 <= v < 3.0.01 CVE
2.0.0 <= v < 3.2.21 CVE
2.10.0 <= v < 2.10.11 CVE
2.10.0 <= v <= 2.10.01 CVE
2.2.4 <= v < 2.3.41 CVE
2.2.4 <= v <= 2.3.31 CVE
2.3.0 <= v < 2.6.11 CVE
2.4.0 <= v < 2.7.01 CVE
2.4.0 <= v < 2.9.31 CVE
2.5.0 <= v < 2.6.21 CVE
2.6.0 <= v < 2.7.41 CVE
2.6.0 <= v <= 2.7.31 CVE
2.7.0 <= v < 2.7.21 CVE
2.7.0 <= v < 2.7.41 CVE
2.7.0 <= v < 2.9.01 CVE
2.7.0 <= v <= 2.7.31 CVE
2.8.0 <= v < 2.8.31 CVE
2.8.2 <= v < 2.8.41 CVE
2.8.2 <= v <= 2.8.31 CVE
2.8.2 <= v <= 2.8.41 CVE
2.9.0 <= v < 2.9.11 CVE
2.9.0 <= v <= 2.9.01 CVE
2.9.3 <= v <= 2.9.31 CVE
3.0.0 <= v < 3.0.51 CVE
3.0.0 <= v < 3.1.41 CVE
3.0.0 <= v < 3.1.71 CVE
3.0.0 <= v < 3.3.21 CVE
3.0.3 <= v < 3.0.41 CVE
3.0.3 <= v <= 3.0.31 CVE
3.1.0 <= v < 3.1.41 CVE
3.1.0 <= v < 3.1.61 CVE
3.1.0 <= v < 3.1.71 CVE
3.1.0 <= v < 3.1.81 CVE
3.1.8 <= v < 3.2.01 CVE
3.3.0 <= v <= 3.3.01 CVE
3.3.1 <= v <= 3.3.11 CVE

Fixed in

21cbbf663b140f4a84cf123acb90328a6a4d30f517 CVEs
3.2.217 CVEs
275ac7303fa702e232c277ac7f4929baa85464d212 CVEs
3.2.012 CVEs
3.3.112 CVEs
37069948c093e4b6720ec4821ff0ed7d6c06993511 CVEs
7ab6dc2ecf362916cde19f2c761cb3103dbc824b8 CVEs
dcdcf3a2b8054fa727efb4cd79d38d2c9c7e1bd58 CVEs
1.10.116 CVEs
3.3.06 CVEs
b113006af61b53feb86c6d328cf0f7fd7283d6df6 CVEs
1c98f573a29d9cee3e4e0000c6fe424a2f025f835 CVEs
2.6.35 CVEs
3.1.85 CVEs
84f6ee0cf8eb9205cd06d38ba1986b43f17347795 CVEs
acffa62713874bc64db3f6447840cf171114476f5 CVEs
beedefac4f83459f9ce50937bd36c845a8a6b6325 CVEs
e514f908c8f943e5bc922b0f1674879fbbd2eeb35 CVEs
12c3c39d1a816c99c626fe4c650e88cf7b1cc1bc4 CVEs
16adc035b1ecdf533f44fbb3e32bea972127bb714 CVEs
2.3.04 CVEs
2.7.04 CVEs
2.7.24 CVEs
6b42e8020f6d21ca892b0d1dc21c60469fef6e5f4 CVEs
75c60923e01375ffc5f71c4f2f7968f489e2ca2f4 CVEs
75fb7acbaca09a040067f0a5a37637ff44eb9e144 CVEs
bfb054e9e867b8b9a6a449e43bfba97f645e025e4 CVEs
0653ffe78e4a0acaf70801a5ceef8dbabdac8b153 CVEs
1.10.153 CVEs
2.0.23 CVEs
2.11.13 CVEs
2.4.23 CVEs
2.6.03 CVEs
2.7.33 CVEs
4c66ebd06029bf28b2cbeb7fed0f0c7f7f74e2113 CVEs
5246c009c557b4f6bdf1cd62bf9b89a2da63f6303 CVEs
55b35f739c5fcb0cf88f71a15a42baa2dda75eaa3 CVEs
5a94e34938858ce2bb390ddf0fd16ddfd1312a9b3 CVEs
85f9762b6eb8873f288e09f9999b22912011866b3 CVEs
999b70178a1f5d891fd2c88af4831a4ba4c2cbc93 CVEs
d7dbfb7e26a50130d3550e781dc71a5fbcaeb3d23 CVEs
d9567eb106929b21329c01171fd398fbef2dc6c63 CVEs
05960ac2ebb1fd9a74f3135e5e8fe5e28160d4b22 CVEs
1.10.12 CVEs
1.10.132 CVEs
12be346adc9f2b96781c5c5341d62e6a49a8d1cf2 CVEs
2.0.12 CVEs
2.10.12 CVEs
2.10.32 CVEs
2.2.42 CVEs
2.3.42 CVEs
2.3.52 CVEs
2.7.12 CVEs
2.7.42 CVEs
2.8.02 CVEs
2.8.12 CVEs
2.8.22 CVEs
2.9.32 CVEs
209e34c5022a78c7691ac68a50f60d976242e17d2 CVEs
2723508345d5cf074aeb673955ce72996785f2bc2 CVEs
289b888f4b7493d3bea35d94d374b8323380ee1a2 CVEs
3.1.12 CVEs
3.1.42 CVEs
3.1.62 CVEs
3.1.72 CVEs
3.2.12 CVEs
3.3.22 CVEs
38cf2147567d102e2aab8198d32a37704dcbb6f02 CVEs
470fdaea275660970777c0f72b8867b382eabc142 CVEs
492ecfe5c03102bfb710108038ebd5fc50cb55b52 CVEs
6fde534efa17fc9bca03531089b3bccd0fc3c96b2 CVEs
8217db8cb4b1ff302c5cf8662477ac00f701e78c2 CVEs
a4a51a02db2994e4ea94b83887739dc79a4d11d92 CVEs
a99354726cec44718391a6b42172462f6c72046d2 CVEs
c077d190609f931387c1fcd7b8cc34f12e2372b92 CVEs
c632b0c0466d7d446898a290d240e7052d0549c72 CVEs
c762e17820cae6b162caa3eec5123760e07d56cc2 CVEs
cdf5d1e1b17b6269e8a5dc95aad4fbe344c05b9b2 CVEs
dc8ffa291b8b0c582cb639c9f3a3c3fd2a96ecf22 CVEs
f53b1d0041d3dc087ff2c6addaa72266e784b9282 CVEs
fcd3c0149f17b364dfb94c0523d23e3145976bbe2 CVEs
05ea74a9429156400ca89ca913c5d838e568ef3a1 CVE
077821050598e6807c63a497bcb70c420b529d8b1 CVE
1.10.141 CVE
1.10.21 CVE
1.10.51 CVE
1.10.61 CVE
1.9.01 CVE
1b3329eb670a1fbf70d2f7eeaa21aaf7baa7bacd1 CVE
1fc3442f1307fdf5e1221b26f41266c4fed330d31 CVE
2.1.21 CVE
2.1.31 CVE
2.10.01 CVE
2.2.01 CVE
2.3.11 CVE
2.4.01 CVE
2.4.31 CVE
2.5.11 CVE
2.5.21 CVE
2.6.11 CVE
2.6.21 CVE
2.8.31 CVE
2.8.41 CVE
2.9.01 CVE
2.9.11 CVE
2.9.21 CVE
21990ed8943ee4dc6e060ee2f11648490c714a3b1 CVE
27f9660ab259e27157e6814310e9e4dc19e8be081 CVE
28e49e72bf18a0b5a3440baf673eacb2a5814f7c1 CVE
2bb862846358d1c5a59b354adb39bc68d5aeae5e1 CVE
2cd797027e9b3c30255f6b24c6ea6a276725cfa61 CVE
2e82233adeee19bdfeb9b5ad8916df2090f0a00e1 CVE
3.0.01 CVE
3.0.41 CVE
3.0.51 CVE
34500f3a2fa4652272bc831e3c18fd2a6a2da5ef1 CVE
3d087a8e1d282648ab2491c0d8f036d8ec08cd3e1 CVE
4a499ad4241876850e4ad93d1db42e3d7b71a6341 CVE
51e648cc19edfb92a166c2491122d7c6ab9122ed1 CVE
5fa80b6aea60f93cdada66f160e2b54f723865ca1 CVE
6e5ae26382b328e88907e8301d4b2352ef8524c51 CVE
6e6a49e2bb2661e9e785ab02ae94fda72d6759d51 CVE
780bd0e8fbf2d36ada52edb769477e0a4edae5801 CVE
79bcc2e668e648098aad6eaa87fe8823c76bc69a1 CVE
83316b81584c9e516a8142778fc509f19d95cc3e1 CVE
91f8265b6820eca747634dce39ae0d70aada26401 CVE
954b3035cc8feb6ef1e13a6715b7c7e47d12932a1 CVE
9dcbe41dd4c1ac265c51ad9a932af68088e509841 CVE
a0303486de970cc654bc12b62c8bee6a25e3382e1 CVE
a1ddf31098a8388d392b338ed29e8925b0e77b691 CVE
a53d9f6d257f193ea5026ba4cd007d5ddeab968f1 CVE
be4330b578012a13bbfdcce7e04768ad13b7f08f1 CVE
e46ce78b66953146c04de5da00cab6299787adad1 CVE
e61cb8fa41f34bc5e3140a2c22b24dd110b4c4211 CVE
f519065bc4dc84c30c8d4ea8bdafa27b060d2a771 CVE
f5b96315fe65b99c0e2542831ff73a3406c4232d1 CVE