Entrar Obtener clave API

Vulnerabilidades de Apache Software Foundation Apache Airflow Task SDK (CVE)

Registros CVE publicados para Apache Software Foundation Apache Airflow Task SDK, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

1 resultados

Alta

CVE-2026-76185 hace 14 horas

Apache Airflow Task SDK: SecretCache: non-injective team cache key enables cross-team secret disclosure in multi-team mode

Apache Software Foundation Apache Airflow Task SDK

Apache Airflow's Task SDK secret cache built its keys from the team name and secret id with unescaped `_` delimiters, so different (team, secret id) pairs could collide. In multi-team deployments a Dag author could read another team's Variable or Connection v…