PyPI/apache-airflow CVE-2025-66236: high 7.5, EPSS 0.44%
Before Airflow 3.2.0, it was unclear that secure Airflow deployments require the Deployment Manager to take appropriate actions and pay attention to security details and security model of Airflow. Som
Action: Upgrade apache-airflow to 3.2.0 or later.
pip install apache-airflow==3.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.2.0 | - |
Fixed versions
| 3.2.0 |
Sources
- osv: PYSEC-2026-8
- http://www.openwall.com/lists/oss-security/2026/04/13/6
- https://lists.apache.org/thread/g8fyy1tkmxkkfk7tx2v6h8mvwzpyykbo
- https://github.com/apache/airflow/pull/58662
- https://github.com/advisories/GHSA-j86x-fwp2-qh7v
CVE-2025-66236 · published · modified · JSON