PyPI/apache-airflow-providers-apache-hive CVE-2023-35797: critical 9.8, EPSS 2.79%

Apache Airflow Hive Provider Beeline remote code execution with Principal

Action: Upgrade apache-airflow-providers-apache-hive to 6.1.1 or later.

pip install apache-airflow-providers-apache-hive==6.1.1

Affected

Fixed versions

Sources

• osv: GHSA-hg6c-qqcm-r79r
• https://nvd.nist.gov/vuln/detail/CVE-2023-35797
• https://github.com/apache/airflow/pull/31983
• https://github.com/apache/airflow/commit/6724eeb6210d5965937eaf9dae3e476eb30f8268
• https://github.com/apache/airflow
• https://lists.apache.org/thread/30y19ok07fw52x5hnkbhwqo3ho0wwc1y
• http://www.openwall.com/lists/oss-security/2023/07/12/3

CVE-2023-35797 · published 2023-07-03T12:30:34Z · modified 2026-06-29T12:26:48.071895816Z · JSON