PyPI/apache-airflow CVE-2022-24288: high 8.8, EPSS 77.88%

OS Command injection in Apache Airflow

Action: Upgrade apache-airflow to 2.2.4 or later.

pip install apache-airflow==2.2.4

Affected

Fixed versions

Sources

• osv: GHSA-3v7g-4pg3-7r6j
• https://nvd.nist.gov/vuln/detail/CVE-2022-24288
• https://github.com/advisories/GHSA-3v7g-4pg3-7r6j
• https://github.com/apache/airflow
• https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2022-30.yaml
• https://lists.apache.org/thread/dbw5ozcmr0h0lhs0yjph7xdc64oht23t

CVE-2022-24288 · published 2022-02-26T00:00:44Z · modified 2024-09-12T14:36:05.110826Z · JSON