PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
apache-airflow Apache Airflow: Authenticated users can bypass the `is_safe_url` check High Risk 7.2 5 months ago 8 hours ago
apache-airflow Command Injection in Apache Airflow and Apache Airflow MySQL Provider Critical 9.8 3 years ago 6 days ago
apache-airflow-providers-mysql Command Injection in Apache Airflow and Apache Airflow MySQL Provider Critical 9.8 3 years ago 6 days ago
apache-airflow-providers-edge3 Apache Airflow Providers Edge3 exposes internal API allowing RCE in web server context Critical 9.8 10 months ago 7 days ago
apache-airflow Apache Airflow: JWT token still valid after logout Critical 9.1 6 months ago 7 days ago
apache-airflow-providers-apache-sqoop Apache Airflow Sqoop Provider Improper Input Validation vulnerability Critical 9.8 3 years ago 7 days ago
apache-airflow-providers-mongo Improper Certificate Validation in apache airflow mongo hook Critical 9.1 2 years ago 7 days ago
apache-airflow-providers-apache-hive Apache Airflow Hive Provider vulnerable to code injection Critical 9.8 3 years ago 7 days ago
apache-airflow OS Command Injection in Apache Airflow Critical 9.8 3 years ago 7 days ago
apache-airflow-providers-google Apache Airflow Google Provider Improper Input Validation vulnerability Critical 9.8 3 years ago 7 days ago
apache-airflow-providers-apache-hive Apache Airflow Hive Provider Beeline remote code execution with Principal Critical 9.8 3 years ago 7 days ago
apache-airflow-providers-apache-hive Apache Airflow Hive Provider vulnerable to Command Injection Critical 9.8 3 years ago 7 days ago
apache-airflow OS Command Injection in Apache Airflow Critical 9.8 3 years ago 7 days ago
apache-airflow-providers-apache-hive Apache Airflow Hive Provider Improper Input Validation vulnerability Critical 9.8 3 years ago 7 days ago
apache-airflow No summary available High Risk 8.8 2 months ago 18 days ago
apache-airflow No summary available Medium Risk 5.4 2 months ago 18 days ago
apache-airflow No summary available High Risk 8.8 2 months ago 18 days ago
apache-airflow No summary available Medium Risk 6.5 2 months ago 18 days ago
apache-airflow No summary available Medium Risk 6.5 2 months ago 18 days ago
apache-airflow No summary available Medium Risk 6.5 2 months ago 18 days ago
apache-airflow No summary available High Risk 7.3 2 months ago 18 days ago
apache-airflow No summary available Medium Risk 4.3 2 months ago 18 days ago
apache-airflow No summary available Medium Risk 6.5 2 months ago 18 days ago
apache-airflow No summary available Medium Risk 5.4 2 months ago 18 days ago
apache-airflow No summary available High Risk 7.5 2 months ago 18 days ago
apache-airflow No summary available Medium Risk 6.5 2 months ago 18 days ago
apache-airflow-providers-yandex No summary available Medium Risk 6.5 2 months ago 18 days ago
apache-airflow-providers-snowflake No summary available Medium Risk 6.3 1 month ago 25 days ago
apache-airflow-providers-google No summary available Medium Risk 4.3 1 month ago 25 days ago
apache-airflow Apache Airflow Variables UI fails to mask sensitive values in deeply nested iterables Medium Risk 4.3 2 months ago 1 month ago
apache-airflow Apache Airflow scheduler unsafely deserializes human-in-the-loop task next_kwargs High Risk 7.3 2 months ago 1 month ago
apache-airflow Apache Airflow Backfill API parser discrepancy permits cross-DAG authorization bypass High Risk 7.5 2 months ago 1 month ago
apache-airflow Apache Airflow bulk endpoints log Variable and Connection secrets in cleartext Medium Risk 6.5 2 months ago 1 month ago
apache-airflow Apache Airflow Task SDK Callback deserialization can import arbitrary modules in the scheduler High Risk 8.8 2 months ago 1 month ago
apache-airflow-providers-yandex Apache Airflow Yandex Lockbox backend allows cross-team secret disclosure Medium Risk 6.5 2 months ago 1 month ago
apache-airflow Apache Airflow exposes dict-valued var.json secrets in Rendered Templates Medium Risk 6.5 2 months ago 1 month ago
apache-airflow Apache Airflow Task SDK fails to mask list-shaped JSON Variables Medium Risk 6.5 2 months ago 1 month ago
apache-airflow Apache Airflow missing team context permits cross-team Dag actions and XCom reads Medium Risk 6.5 2 months ago 1 month ago
apache-airflow Apache Airflow XCom API permits unsafe deserialization through JSON string literals Medium Risk 5.4 2 months ago 1 month ago
apache-airflow Apache Airflow environment-variable secrets backend permits cross-team credential use Medium Risk 5.4 2 months ago 1 month ago
apache-airflow Apache Airflow exception-node deserialization permits arbitrary callable execution High Risk 8.8 2 months ago 1 month ago
apache-airflow Apache Airflow Config API exposes team-scoped sensitive configuration values Medium Risk 6.5 2 months ago 1 month ago
apache-airflow No summary available Medium Risk 4.2 1 month ago 1 month ago
apache-airflow No summary available Medium Risk 4.3 1 month ago 1 month ago
apache-airflow No summary available Critical 9.1 1 month ago 1 month ago
apache-airflow-providers-apache-kafka No summary available High Risk 8.8 1 month ago 1 month ago
apache-airflow Apache Airflow exposes sensitive JSON Variable values through the Bulk Variables API Medium Risk 6.5 3 months ago 1 month ago
apache-airflow Apache Airflow exposes sensitive JSON Variable values through the Bulk Variables API Medium Risk 6.5 1 month ago 1 month ago
apache-airflow No summary available Critical 9.8 3 months ago 1 month ago
apache-airflow No summary available Medium Risk 4.3 3 months ago 1 month ago
Data courtesy of OSV.dev
Page 1