PyPI/apache-airflow CVE-2022-43982: unknown, EPSS 1.58%

In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument.

Action: Upgrade apache-airflow to 2.4.2 or later.

pip install apache-airflow==2.4.2

Affected

Fixed versions

Sources

• osv: PYSEC-2022-42970
• https://lists.apache.org/thread/vqnvdrfsw9z7v7c46qh3psjgr7wy959l
• https://github.com/apache/airflow/pull/27143
• https://github.com/advisories/GHSA-h63r-9xxf-f2c7

CVE-2022-43982 · published 2022-11-02T12:15:00Z · modified 2026-06-10T17:00:19.351007619Z · JSON