Headline
GHSA-3h4m-m55v-gx4m: Apache Airflow Improper Input Validation vulnerability
Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang. It is recommended to upgrade to a version that is not affected
Apache Airflow Improper Input Validation vulnerability
Moderate severity GitHub Reviewed Published Jul 12, 2023 to the GitHub Advisory Database • Updated Jul 12, 2023
Related news
CVE-2023-36543: Use re2 for matching untrusted regex by pierrejeambrun · Pull Request #32060 · apache/airflow
Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang. It is recommended to upgrade to a version that is not affected