PyPI/apache-airflow CVE-2021-45229: medium 6.1, EPSS 2.60%

Apache Airflow Cross-site Scripting Vulnerability

Action: Upgrade apache-airflow to 2.2.4rc1 or later.

pip install apache-airflow==2.2.4rc1

Affected

Fixed versions

Sources

• osv: GHSA-65xw-pcqw-hjrh
• https://nvd.nist.gov/vuln/detail/CVE-2021-45229
• https://github.com/apache/airflow/commit/628aa1f99c865d97d0b1c7c76e630e43a7b8d319
• https://github.com/advisories/GHSA-65xw-pcqw-hjrh
• https://github.com/apache/airflow
• https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2022-29.yaml
• https://lists.apache.org/thread/phx76cgtmhwwdy780rvwhobx8qoy4bnk

CVE-2021-45229 · published 2022-02-26T00:00:45Z · modified 2024-09-12T19:50:33.042283Z · JSON