{"action":"Upgrade apache-airflow to 2.3.2 or later.","affected":[{"fixed":"2.3.2","introduced":"0"}],"component":"apache-airflow","cve_ids":["CVE-2023-28707"],"ecosystem":"PyPI","epss":0.02062,"exploited":false,"fixed_versions":["2.3.2"],"ghsa_id":"GHSA-85pf-r4c7-3j9r","id":"tcs_01M5KGKC51SCMH172A8TM9SGST","modified_at":"2026-07-07T17:57:36.626064859Z","published_at":"2023-04-07T15:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-3","https://github.com/apache/airflow/pull/30215","https://lists.apache.org/thread/dfoj7q1nd0vhhsl8fjg63z4j6mfmdxtk"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2023-3","url":"https://osv.dev/vulnerability/PYSEC-2023-3"}],"summary":"Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider.This issue affects Apache Airflow Drill Provider: before 2.3.2."}