PyPI/apache-airflow-providers-docker CVE-2022-38362: high 8.8, EPSS 1.90%

Remote code execution in Apache Airflow Docker's Provider

Action: Upgrade apache-airflow-providers-docker to 3.0.0 or later.

pip install apache-airflow-providers-docker==3.0.0

Affected

Fixed versions

Sources

• osv: GHSA-746v-hfh2-xphm
• https://nvd.nist.gov/vuln/detail/CVE-2022-38362
• https://lists.apache.org/thread/614p38nf4gbk8xhvnskj9b1sqo2dknkb
• http://www.openwall.com/lists/oss-security/2022/08/16/1

CVE-2022-38362 · published 2022-08-17T00:00:21Z · modified 2026-07-07T11:56:47.874726932Z · JSON