PyPI/apache-airflow CVE-2024-39863: medium 5.4, EPSS 1.00%

Apache Airflow Potential Cross-site Scripting Vulnerability

Action: Upgrade apache-airflow to 2.9.3 or later.

pip install apache-airflow==2.9.3

Affected

Fixed versions

Sources

• osv: GHSA-j482-47xf-p25c
• https://nvd.nist.gov/vuln/detail/CVE-2024-39863
• https://github.com/apache/airflow/pull/40475
• https://github.com/apache/airflow/commit/f18f48492dc69f392e45567580b6ddb0c070ea58
• https://github.com/apache/airflow
• https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2024-189.yaml
• https://lists.apache.org/thread/gxkvs279f1mbvckv5q65worr6how20o3
• http://www.openwall.com/lists/oss-security/2024/07/16/6

CVE-2024-39863 · published 2024-07-17T09:30:48Z · modified 2026-09-10T03:50:16.761299737Z · JSON