CVE security advisories and vulnerability history for apache-airflow by PyPI.
Last updated
PyPI apache-airflow has 77 published CVE records since 2018, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.
This page aggregates every publicly disclosed vulnerability (CVE) affecting PyPI apache-airflow, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of PyPI apache-airflow's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
50 additional CVEs have no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
2
2 of PyPI apache-airflow's CVEs are confirmed exploited in the wild.
Public exploits
3
3 of PyPI apache-airflow's CVEs have a known public exploit available.
Browse every PyPI apache-airflow version named in a CVE, then pick one to see only the CVEs that affect it.
77 CVEs
Showing 30 of 77
The CWE weakness categories most often found in PyPI apache-airflow CVEs. Follow any weakness for its full explanation.
How many PyPI apache-airflow CVEs were published each year.
Browse vulnerabilities for other products by PyPI.
Common questions about PyPI apache-airflow vulnerabilities.
PyPI apache-airflow has 77 published CVE records since 2018.
Yes — 2 of PyPI apache-airflow's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Yes — 3 of PyPI apache-airflow's CVEs have a known public exploit.
255 distinct PyPI apache-airflow versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
PyPI apache-airflow's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-20 (Improper Input Validation).
PyPI apache-airflow has 2 critical and 14 high-severity CVEs.
The average CVSS base score across PyPI apache-airflow's scored CVEs is 7.2.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new PyPI apache-airflow vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
