PyPI/apache-airflow-providers-google CVE-2023-25691: critical 9.8, EPSS 1.60%

Apache Airflow Google Provider Improper Input Validation vulnerability

Action: Upgrade apache-airflow-providers-google to 8.10.0 or later.

pip install apache-airflow-providers-google==8.10.0

Affected

Fixed versions

Sources

• osv: GHSA-8g23-2q5p-8866
• https://nvd.nist.gov/vuln/detail/CVE-2023-25691
• https://github.com/apache/airflow/pull/29497
• https://github.com/apache/airflow
• https://lists.apache.org/thread/zdr8ovfttbh7kj0lydgcw88tbt2nmkcy
• https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow-providers-google/PYSEC-2026-277.yaml
• https://pypi.org/project/apache-airflow-providers-google

CVE-2023-25691 · published 2023-02-24T12:31:20Z · modified 2026-10-26T21:30:04.157195437Z · JSON