Loading HuntDB...

GHSA-2h84-3crq-vgfj

GitHub Security Advisory

Apache Airflow Incorrect Authorization vulnerability

✓ GitHub Reviewed HIGH Has CVE

Advisory Details

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unauthorized read access to a DAG through the URL. It is recommended to upgrade to a version that is not affected

Affected Packages

PyPI apache-airflow
Affected versions: 0 (fixed in 2.6.3)

Related CVEs

Key Information

GHSA ID
GHSA-2h84-3crq-vgfj
Published
July 12, 2023 12:31 PM
Last Modified
November 18, 2024 4:26 PM
CVSS Score
7.5 /10
Primary Ecosystem
PyPI
Primary Package
apache-airflow
GitHub Reviewed
✓ Yes

Dataset

Last updated: July 27, 2025 6:35 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.