← All credits
Hussein Awala
5 vulnerability records and advisories credit this contributor.
CVE-2023-51702
Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service
CVE-2023-50943
Apache Airflow: Potential pickle deserialization vulnerability in XComs
CVE-2023-45348
Apache Airflow: Configuration information leakage vulnerability
CVE-2023-42781
Apache Airflow: Permission verification bypass allows viewing dagruns of other dags
CVE-2023-42780
Apache Airflow: Improper access control vulnerability in the "List dag warnings" feature