{"action":"Upgrade apache-airflow to 1.9.0 or later.","affected":[{"fixed":"1.9.0","introduced":"0"}],"component":"apache-airflow","cve_ids":["CVE-2017-12614"],"ecosystem":"PyPI","epss":0.0202,"exploited":false,"fixed_versions":["1.9.0"],"ghsa_id":"GHSA-rv25-9wgj-xg75","id":"tcs_01M5KG806SW5XDRHBMQKD289P9","modified_at":"2026-06-10T17:00:07.209775660Z","published_at":"2018-08-06T13:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2018-45","https://lists.apache.org/thread.html/2c72480c76619c5e7793f0d213c34082f0598eaa4d212172f068940f@%3Cdev.airflow.apache.org%3E","https://github.com/advisories/GHSA-rv25-9wgj-xg75"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2018-45","url":"https://osv.dev/vulnerability/PYSEC-2018-45"}],"summary":"It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack. Chrome will detect this as a reflected XSS attempt and prevent the page from loading. Firefox and other bro"}