{"action":"Upgrade apache-airflow to 2.4.0rc1 or later.","affected":[{"fixed":"2.4.0rc1","introduced":"2.3.0"}],"component":"apache-airflow","cve_ids":["CVE-2022-40754"],"ecosystem":"PyPI","epss":0.01759,"exploited":false,"fixed_versions":["2.4.0rc1"],"ghsa_id":"GHSA-4fg5-j4mm-wfpg","id":"tcs_01M5KEY11A9ZVN9Q9FTMXBVP79","modified_at":"2024-09-11T18:46:17.046387Z","published_at":"2022-09-22T22:39:52Z","references":["https://osv.dev/vulnerability/GHSA-4fg5-j4mm-wfpg","https://nvd.nist.gov/vuln/detail/CVE-2022-40754","https://github.com/apache/airflow/pull/26409","https://github.com/apache/airflow/commit/3871f00230b7064e6234aa65b8a00ee2b6d33e4c","https://github.com/apache/airflow/commit/56e7555c42f013f789a4b718676ff09b4a9d5135","https://github.com/apache/airflow","https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2022-280.yaml","https://lists.apache.org/thread/cn098dcp5x3c402xrb06p3l7nz5goffm"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-4fg5-j4mm-wfpg","url":"https://osv.dev/vulnerability/GHSA-4fg5-j4mm-wfpg"}],"summary":"Apache Airflow contains open redirect"}