PyPI/apache-airflow CVE-2023-46288: medium 4.3, EPSS 1.84%

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.4.0 to 2.7.0.

Action: Upgrade apache-airflow to 2.7.0 or later.

pip install apache-airflow==2.7.0

Affected

Fixed versions

Sources

• osv: PYSEC-2023-218
• https://github.com/apache/airflow/pull/32261
• https://lists.apache.org/thread/yw4vzm0c5lqkwm0bxv6qy03yfd1od4nw
• https://github.com/advisories/GHSA-9qqg-mh7c-chfq

CVE-2023-46288 · published 2023-10-23T19:15:00Z · modified 2026-06-10T17:00:23.548480387Z · JSON