How many Apache Software Foundation Apache Airflow CVEs are in CISA KEV?

Yes — 1 of Apache Software Foundation Apache Airflow's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Apache Software Foundation Apache Airflow are affected?

129 distinct Apache Software Foundation Apache Airflow versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Apache Software Foundation Apache Airflow CVEs?

Apache Software Foundation Apache Airflow's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-502 (Deserialization of Untrusted Data), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).

What is the average severity of Apache Software Foundation Apache Airflow CVEs?

The average CVSS base score across Apache Software Foundation Apache Airflow's scored CVEs is 6.7.

Apache Software Foundation Apache Airflow Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Apache Software Foundation Apache Airflow vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Apache Software Foundation Apache Airflow Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Apache Software Foundation Apache Airflow has 152 published CVE records since 2018, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.

Severity and exploitation

How the CVSS severity of Apache Software Foundation Apache Airflow's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical13

High54

Medium80

Low5

In CISA’s Known Exploited Vulnerabilities catalog

One of Apache Software Foundation Apache Airflow's CVEs is confirmed exploited in the wild.

Public exploits

3 of Apache Software Foundation Apache Airflow's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Apache Software Foundation Apache Airflow version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

Apache Airflow 2.0.01 CVE
Apache Airflow 2.0.11 CVE

Version ranges

< 3.2.28 CVEs
< 3.3.18 CVEs
3.0.0 <= v < 3.2.06 CVEs
< 2.6.35 CVEs
< 3.3.05 CVEs
>= 1.10.10 and below5 CVEs
3.0.0 <= v < 3.2.25 CVEs
< 2.11.14 CVEs
< 3.2.04 CVEs

Common weakness types

The CWE weakness categories most often found in Apache Software Foundation Apache Airflow CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Apache Software Foundation Apache Airflow CVEs were published each year.

2018

2019

2020

2021

2022

2023

2024

Other Apache Software Foundation products

Browse vulnerabilities for other products by Apache Software Foundation.

http server371 CVEs tomcat278 CVEs airflow222 CVEs apache-airflow145 CVEs Apache HTTP Server145 CVEs Apache Tomcat138 CVEs httpd125 CVEs traffic server121 CVEs

Frequently asked questions

Common questions about Apache Software Foundation Apache Airflow vulnerabilities.

How many CVEs does Apache Software Foundation Apache Airflow have?: Apache Software Foundation Apache Airflow has 152 published CVE records since 2018.
How many Apache Software Foundation Apache Airflow CVEs are in CISA KEV?: Yes — 1 of Apache Software Foundation Apache Airflow's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Apache Software Foundation Apache Airflow vulnerabilities?: Yes — 3 of Apache Software Foundation Apache Airflow's CVEs have a known public exploit.
Which versions of Apache Software Foundation Apache Airflow are affected?: 129 distinct Apache Software Foundation Apache Airflow versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Apache Software Foundation Apache Airflow CVEs?: Apache Software Foundation Apache Airflow's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-502 (Deserialization of Untrusted Data), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).
How many critical Apache Software Foundation Apache Airflow vulnerabilities are there?: Apache Software Foundation Apache Airflow has 13 critical and 54 high-severity CVEs.
What is the average severity of Apache Software Foundation Apache Airflow CVEs?: The average CVSS base score across Apache Software Foundation Apache Airflow's scored CVEs is 6.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Apache Software Foundation Apache Airflow vulnerabilities

Get an alert for each new Apache Software Foundation Apache Airflow CVE, with AI-written analysis and remediation steps.

Create an account See pricing

Apache Software Foundation Apache Airflow Vulnerabilities