PyPI/apache-airflow CVE-2022-43985: unknown, EPSS 1.65%

In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's `/confirm` endpoint.

Action: Upgrade apache-airflow to 2.4.2 or later.

pip install apache-airflow==2.4.2

Affected

Fixed versions

Sources

• osv: PYSEC-2022-42971
• https://lists.apache.org/thread/m13y9s5kw92fw9l8j4qd85h0txp4kfcq
• https://github.com/apache/airflow/pull/27143
• https://github.com/advisories/GHSA-f9fq-78ch-4wmj

CVE-2022-43985 · published 2022-11-02T12:15:00Z · modified 2026-06-10T17:00:20.799618586Z · JSON