{"action":"Upgrade apache-airflow to 2.0.0b1 or later.","affected":[{"fixed":"2.0.0b1","introduced":"1.10.0"},{"fixed":"2.2.0","introduced":"2.0.0"}],"component":"apache-airflow","cve_ids":["CVE-2021-45230"],"ecosystem":"PyPI","epss":0.01709,"exploited":false,"fixed_versions":["2.0.0b1","2.2.0"],"ghsa_id":"GHSA-4jh2-3c85-q67h","id":"tcs_01M5KGFYPKMFTG2BR5SY6QQRP6","modified_at":"2023-12-06T01:01:43.208047Z","published_at":"2022-01-20T11:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-11","https://lists.apache.org/thread/m778ojn0k595rwco4ht9wjql89mjoxnl","https://github.com/advisories/GHSA-4jh2-3c85-q67h"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-11","url":"https://osv.dev/vulnerability/PYSEC-2022-11"}],"summary":"In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has \"can_create\" permissions on DAG Runs can create Dag Runs for dags that they don't have \"edit\" permissions for"}