{"action":"Upgrade apache-airflow to 2.8.0 or later.","affected":[{"fixed":"2.8.0","introduced":"0"}],"component":"apache-airflow","cve_ids":["CVE-2023-50783"],"ecosystem":"PyPI","epss":0.0139,"exploited":false,"fixed_versions":["2.8.0"],"ghsa_id":"GHSA-5938-79hg-xh3q","id":"tcs_01M5KF0GDH7F37X47S20V7R2EG","modified_at":"2024-11-21T21:49:02.040667Z","published_at":"2023-12-21T12:30:28Z","references":["https://osv.dev/vulnerability/GHSA-5938-79hg-xh3q","https://nvd.nist.gov/vuln/detail/CVE-2023-50783","https://github.com/apache/airflow/pull/33932","https://github.com/apache/airflow/commit/0e1c106d7cd0703125528a691088e42e17c99929","https://github.com/apache/airflow","https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2023-267.yaml","https://lists.apache.org/thread/rs7cr3yp726mb89s1m844hy9pq7frgcn","http://www.openwall.com/lists/oss-security/2023/12/21/4"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-5938-79hg-xh3q","url":"https://osv.dev/vulnerability/GHSA-5938-79hg-xh3q"}],"summary":"Apache Airflow Improper Access Control vulnerability"}