PyPI/apache-airflow-providers-odbc CVE-2023-35798: medium 4.3, EPSS 1.26%

Apache Airflow ODBC Provider, Apache Airflow MSSQL Provider Improper Input Validation vulnerability

Action: Upgrade apache-airflow-providers-odbc to 4.0.0 or later.

pip install apache-airflow-providers-odbc==4.0.0

Affected

Fixed versions

Sources

• osv: GHSA-q57w-826p-46jr
• https://nvd.nist.gov/vuln/detail/CVE-2023-35798
• https://github.com/apache/airflow/pull/31984
• https://github.com/apache/airflow/commit/b6836986846058e9e5fa271fb7b22ae721020787
• https://github.com/apache/airflow
• https://lists.apache.org/thread/951rb9m7wwox5p30tdvcfjxq8j1mp4pj

CVE-2023-35798 · published 2023-06-27T12:30:42Z · modified 2026-07-13T16:43:35.796100897Z · JSON