PyPI/apache-airflow-providers-microsoft-mssql CVE-2023-35798: medium 4.3, EPSS 1.26%
Apache Airflow ODBC Provider, Apache Airflow MSSQL Provider Improper Input Validation vulnerability
Action: Upgrade apache-airflow-providers-microsoft-mssql to 3.4.1 or later.
pip install apache-airflow-providers-microsoft-mssql==3.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.4.1 | - |
Fixed versions
| 3.4.1 |
Sources
- osv: GHSA-q57w-826p-46jr#PyPI/apache-airflow-providers-microsoft-mssql
- https://nvd.nist.gov/vuln/detail/CVE-2023-35798
- https://github.com/apache/airflow/pull/31984
- https://github.com/apache/airflow/commit/b6836986846058e9e5fa271fb7b22ae721020787
- https://github.com/apache/airflow
- https://lists.apache.org/thread/951rb9m7wwox5p30tdvcfjxq8j1mp4pj
CVE-2023-35798 · published · modified · JSON