Loading HuntDB...

GHSA-3h4m-m55v-gx4m

GitHub Security Advisory

Apache Airflow Improper Input Validation vulnerability

✓ GitHub Reviewed HIGH Has CVE

Advisory Details

Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang. It is recommended to upgrade to a version that is not affected

Affected Packages

PyPI apache-airflow
Affected versions: 0 (fixed in 2.6.3)

Related CVEs

Key Information

GHSA ID
GHSA-3h4m-m55v-gx4m
Published
July 12, 2023 12:31 PM
Last Modified
November 18, 2024 4:26 PM
CVSS Score
7.5 /10
Primary Ecosystem
PyPI
Primary Package
apache-airflow
GitHub Reviewed
✓ Yes

Dataset

Last updated: September 16, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.