PyPI/apache-airflow CVE-2023-35005: unknown, EPSS 1.53%

In Apache Airflow, some potentially sensitive values were being shown to the user in certain situations.

Action: Upgrade apache-airflow to 2.6.2 or later.

pip install apache-airflow==2.6.2

Affected

Fixed versions

Sources

• osv: PYSEC-2023-89
• https://lists.apache.org/thread/o4f2cxh0054m9tlxpb81c1yhylor5gjd
• https://github.com/apache/airflow/pull/31788
• https://github.com/apache/airflow/pull/31820
• https://github.com/advisories/GHSA-mjff-wv85-hmcj

CVE-2023-35005 · published 2023-06-19T09:15:00Z · modified 2026-06-10T17:00:30.090832671Z · JSON