CVE-2024-28423
1 advisory.
PyPI/airflow-diagrams CVE-2024-28423: critical 9.8, EPSS 0.78%
Airflow-Diagrams v2.1.0 was discovered to contain an arbitrary file upload vulnerability in the unsafe_load function at cli.py. This vulnerability allows attackers to execute arbitrary code via upload
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.1.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2024-263
- https://github.com/bayuncao/vul-cve-15
- https://github.com/feluelle/airflow-diagrams
CVE-2024-28423 · published · modified · JSON