Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2026-41084 Vulnerability in apache-airflow (CVE-2026-41084)
vulnerability in apache-airflow (CVE-2026-41084). Data can be tampered with by attackers. Exploitable via `DELETE /api/v2/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances`. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-42588 Vulnerability in activemq (CVE-2026-42588)
vulnerability in activemq (CVE-2026-42588). Confidential information can be exposed externally. Mitigation: upgrade to `5.19.7, 6.2.6` or later.
CVE-2026-45426 Authorization Flaw in apache-airflow (CVE-2026-45426)
vulnerability in apache-airflow (CVE-2026-45426). Risk of unauthorized operations or information disclosure. Exploitable via ``sub``. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-42359 Unsafe Deserialization in apache-airflow (CVE-2026-42359)
vulnerability in apache-airflow (CVE-2026-42359). Successful exploitation can lead to full system takeover. Exploitable via `PATCH /api/v2/xcomEntries/{key}`. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-45360 Unsafe Deserialization in apache-airflow (CVE-2026-45360)
vulnerability in apache-airflow (CVE-2026-45360). Risk of unauthorized operations or information disclosure. Exploitable via ``DeadlineReference``. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-42358 Information Disclosure in airflow (CVE-2026-42358)
vulnerability in airflow (CVE-2026-42358). Confidential information can be exposed externally. Exploitable via ``password``. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-42253 Cross-Site Scripting (XSS) in activemq (CVE-2026-42253)
cross-site scripting in activemq (CVE-2026-42253). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.19.7, 6.2.6` or later.
CVE-2026-42252 Vulnerability in apache-airflow (CVE-2026-42252)
vulnerability in apache-airflow (CVE-2026-42252). Confidential information can be exposed externally. Exploitable via ``Dag.can_trigger``. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-44825 Vulnerability in solr (CVE-2026-44825)
vulnerability in solr (CVE-2026-44825). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.0.0` or later.
CVE-2026-41017 Vulnerability in apache-airflow (CVE-2026-41017)
vulnerability in apache-airflow (CVE-2026-41017). Confidential information can be exposed externally. Exploitable via ``JWTRefreshMiddleware``. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-41014 Vulnerability in apache-airflow (CVE-2026-41014)
vulnerability in apache-airflow (CVE-2026-41014). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-40961 Open Redirect in airflow (CVE-2026-40961)
vulnerability in airflow (CVE-2026-40961). Risk of unauthorized operations or information disclosure. Exploitable via ``is_safe_url``. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-40545 Cross-Site Scripting (XSS) in CVE-2026-40545 (CVE-2026-40545)
cross-site scripting in CVE-2026-40545 (CVE-2026-40545). Risk of unauthorized operations or information disclosure.
CVE-2026-40861 Vulnerability in apache-airflow (CVE-2026-40861)
vulnerability in apache-airflow (CVE-2026-40861). Confidential information can be exposed externally. Exploitable via ``airflow.cfg``. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-40543 Vulnerability in CVE-2026-40543 (CVE-2026-40543)
vulnerability in CVE-2026-40543 (CVE-2026-40543). Risk of unauthorized operations or information disclosure.
CVE-2026-40548 Unrestricted File Upload in path-traversal (CVE-2026-40548)
vulnerability in path-traversal (CVE-2026-40548). Risk of unauthorized operations or information disclosure.
CVE-2026-40547 Path Traversal in path-traversal (CVE-2026-40547)
path traversal in path-traversal (CVE-2026-40547). Risk of unauthorized operations or information disclosure.
CVE-2026-40544 Cross-Site Scripting (XSS) in CVE-2026-40544 (CVE-2026-40544)
cross-site scripting in CVE-2026-40544 (CVE-2026-40544). Risk of unauthorized operations or information disclosure.
CVE-2026-32325 Vulnerability in CVE-2026-32325 (CVE-2026-32325)
vulnerability in CVE-2026-32325 (CVE-2026-32325). Successful exploitation can lead to full system takeover.
CVE-2026-40546 SQL Injection in sqli (CVE-2026-40546)
SQL injection in sqli (CVE-2026-40546). Risk of unauthorized operations or information disclosure.
CVE-2026-40549 Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-40549)
vulnerability in csrf (CVE-2026-40549). Risk of unauthorized operations or information disclosure.
CVE-2026-40963 Vulnerability in airflow (CVE-2026-40963)
vulnerability in airflow (CVE-2026-40963). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.2` or later.
CVE-2026-10241 SSRF (Server-Side Request Forgery) in CVE-2026-10241 (CVE-2026-10241)
SSRF in CVE-2026-10241 (CVE-2026-10241). Risk of unauthorized operations or information disclosure.
CVE-2026-10243 Authentication Bypass in CVE-2026-10243 (CVE-2026-10243)
authentication bypass in CVE-2026-10243 (CVE-2026-10243). Risk of unauthorized operations or information disclosure.
CVE-2026-10242 Vulnerability in sqli (CVE-2026-10242)
vulnerability in sqli (CVE-2026-10242). Risk of unauthorized operations or information disclosure.
CVE-2026-10517 SSRF (Server-Side Request Forgery) in github.com/quay/claircore (CVE-2026-10517)
SSRF in github.com/quay/claircore (CVE-2026-10517). Risk of unauthorized operations or information disclosure.
CVE-2026-10240 SSRF (Server-Side Request Forgery) in CVE-2026-10240 (CVE-2026-10240)
SSRF in CVE-2026-10240 (CVE-2026-10240). Risk of unauthorized operations or information disclosure.
CVE-2026-10237 Vulnerability in sqli (CVE-2026-10237)
vulnerability in sqli (CVE-2026-10237). Risk of unauthorized operations or information disclosure.
CVE-2026-10236 Vulnerability in CVE-2026-10236 (CVE-2026-10236)
vulnerability in CVE-2026-10236 (CVE-2026-10236). Risk of unauthorized operations or information disclosure.
CVE-2026-10239 SSRF (Server-Side Request Forgery) in CVE-2026-10239 (CVE-2026-10239)
SSRF in CVE-2026-10239 (CVE-2026-10239). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21920-1 Vulnerability in SUSE-SU-2026:21920-1 (SUSE-SU-2026:21920-1)
vulnerability in SUSE-SU-2026:21920-1 (SUSE-SU-2026:21920-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21878-1 Vulnerability in SUSE-SU-2026:21878-1 (SUSE-SU-2026:21878-1)
vulnerability in SUSE-SU-2026:21878-1 (SUSE-SU-2026:21878-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21936-1 Vulnerability in SUSE-SU-2026:21936-1 (SUSE-SU-2026:21936-1)
vulnerability in SUSE-SU-2026:21936-1 (SUSE-SU-2026:21936-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21896-1 Vulnerability in SUSE-SU-2026:21896-1 (SUSE-SU-2026:21896-1)
vulnerability in SUSE-SU-2026:21896-1 (SUSE-SU-2026:21896-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21931-1 Vulnerability in SUSE-SU-2026:21931-1 (SUSE-SU-2026:21931-1)
vulnerability in SUSE-SU-2026:21931-1 (SUSE-SU-2026:21931-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21909-1 Vulnerability in SUSE-SU-2026:21909-1 (SUSE-SU-2026:21909-1)
vulnerability in SUSE-SU-2026:21909-1 (SUSE-SU-2026:21909-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21928-1 Vulnerability in SUSE-SU-2026:21928-1 (SUSE-SU-2026:21928-1)
vulnerability in SUSE-SU-2026:21928-1 (SUSE-SU-2026:21928-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21929-1 Vulnerability in SUSE-SU-2026:21929-1 (SUSE-SU-2026:21929-1)
vulnerability in SUSE-SU-2026:21929-1 (SUSE-SU-2026:21929-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21930-1 Vulnerability in SUSE-SU-2026:21930-1 (SUSE-SU-2026:21930-1)
vulnerability in SUSE-SU-2026:21930-1 (SUSE-SU-2026:21930-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21926-1 Vulnerability in SUSE-SU-2026:21926-1 (SUSE-SU-2026:21926-1)
vulnerability in SUSE-SU-2026:21926-1 (SUSE-SU-2026:21926-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21925-1 Vulnerability in SUSE-SU-2026:21925-1 (SUSE-SU-2026:21925-1)
vulnerability in SUSE-SU-2026:21925-1 (SUSE-SU-2026:21925-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21905-1 Vulnerability in SUSE-SU-2026:21905-1 (SUSE-SU-2026:21905-1)
vulnerability in SUSE-SU-2026:21905-1 (SUSE-SU-2026:21905-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21908-1 Vulnerability in SUSE-SU-2026:21908-1 (SUSE-SU-2026:21908-1)
vulnerability in SUSE-SU-2026:21908-1 (SUSE-SU-2026:21908-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21904-1 Vulnerability in SUSE-SU-2026:21904-1 (SUSE-SU-2026:21904-1)
vulnerability in SUSE-SU-2026:21904-1 (SUSE-SU-2026:21904-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21906-1 Vulnerability in SUSE-SU-2026:21906-1 (SUSE-SU-2026:21906-1)
vulnerability in SUSE-SU-2026:21906-1 (SUSE-SU-2026:21906-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21907-1 Vulnerability in SUSE-SU-2026:21907-1 (SUSE-SU-2026:21907-1)
vulnerability in SUSE-SU-2026:21907-1 (SUSE-SU-2026:21907-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21903-1 Vulnerability in SUSE-SU-2026:21903-1 (SUSE-SU-2026:21903-1)
vulnerability in SUSE-SU-2026:21903-1 (SUSE-SU-2026:21903-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21927-1 Vulnerability in SUSE-SU-2026:21927-1 (SUSE-SU-2026:21927-1)
vulnerability in SUSE-SU-2026:21927-1 (SUSE-SU-2026:21927-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21924-1 Vulnerability in SUSE-SU-2026:21924-1 (SUSE-SU-2026:21924-1)
vulnerability in SUSE-SU-2026:21924-1 (SUSE-SU-2026:21924-1). Risk of unauthorized operations or information disclosure.
SUSE-SU-2026:21923-1 Vulnerability in SUSE-SU-2026:21923-1 (SUSE-SU-2026:21923-1)
vulnerability in SUSE-SU-2026:21923-1 (SUSE-SU-2026:21923-1). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →