Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-41084 |
|
Vulnerability in apache-airflow (CVE-2026-41084)
vulnerability in apache-airflow (CVE-2026-41084). Data can be tampered with by attackers. Exploitable via `DELETE /api/v2/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances`. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-42588 |
|
Vulnerability in activemq (CVE-2026-42588)
vulnerability in activemq (CVE-2026-42588). Confidential information can be exposed externally. Mitigation: upgrade to `5.19.7, 6.2.6` or later.
|
| CVE-2026-45426 |
|
Authorization Flaw in apache-airflow (CVE-2026-45426)
vulnerability in apache-airflow (CVE-2026-45426). Risk of unauthorized operations or information disclosure. Exploitable via ``sub``. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-42359 |
|
Unsafe Deserialization in apache-airflow (CVE-2026-42359)
vulnerability in apache-airflow (CVE-2026-42359). Successful exploitation can lead to full system takeover. Exploitable via `PATCH /api/v2/xcomEntries/{key}`. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-45360 |
|
Unsafe Deserialization in apache-airflow (CVE-2026-45360)
vulnerability in apache-airflow (CVE-2026-45360). Risk of unauthorized operations or information disclosure. Exploitable via ``DeadlineReference``. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-42358 |
|
Information Disclosure in airflow (CVE-2026-42358)
vulnerability in airflow (CVE-2026-42358). Confidential information can be exposed externally. Exploitable via ``password``. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-42253 |
|
Cross-Site Scripting (XSS) in activemq (CVE-2026-42253)
cross-site scripting in activemq (CVE-2026-42253). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.19.7, 6.2.6` or later.
|
| CVE-2026-42252 |
|
Vulnerability in apache-airflow (CVE-2026-42252)
vulnerability in apache-airflow (CVE-2026-42252). Confidential information can be exposed externally. Exploitable via ``Dag.can_trigger``. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-44825 |
|
Vulnerability in solr (CVE-2026-44825)
vulnerability in solr (CVE-2026-44825). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `10.0.0` or later.
|
| CVE-2026-41017 |
|
Vulnerability in apache-airflow (CVE-2026-41017)
vulnerability in apache-airflow (CVE-2026-41017). Confidential information can be exposed externally. Exploitable via ``JWTRefreshMiddleware``. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-41014 |
|
Vulnerability in apache-airflow (CVE-2026-41014)
vulnerability in apache-airflow (CVE-2026-41014). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-40961 |
|
Open Redirect in airflow (CVE-2026-40961)
vulnerability in airflow (CVE-2026-40961). Risk of unauthorized operations or information disclosure. Exploitable via ``is_safe_url``. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-40545 |
|
Cross-Site Scripting (XSS) in CVE-2026-40545 (CVE-2026-40545)
cross-site scripting in CVE-2026-40545 (CVE-2026-40545). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40861 |
|
Vulnerability in apache-airflow (CVE-2026-40861)
vulnerability in apache-airflow (CVE-2026-40861). Confidential information can be exposed externally. Exploitable via ``airflow.cfg``. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-40543 |
|
Vulnerability in CVE-2026-40543 (CVE-2026-40543)
vulnerability in CVE-2026-40543 (CVE-2026-40543). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40548 |
|
Unrestricted File Upload in path-traversal (CVE-2026-40548)
vulnerability in path-traversal (CVE-2026-40548). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40547 |
|
Path Traversal in path-traversal (CVE-2026-40547)
path traversal in path-traversal (CVE-2026-40547). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40544 |
|
Cross-Site Scripting (XSS) in CVE-2026-40544 (CVE-2026-40544)
cross-site scripting in CVE-2026-40544 (CVE-2026-40544). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-32325 |
|
Vulnerability in CVE-2026-32325 (CVE-2026-32325)
vulnerability in CVE-2026-32325 (CVE-2026-32325). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40546 |
|
SQL Injection in sqli (CVE-2026-40546)
SQL injection in sqli (CVE-2026-40546). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40549 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2026-40549)
vulnerability in csrf (CVE-2026-40549). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40963 |
|
Vulnerability in airflow (CVE-2026-40963)
vulnerability in airflow (CVE-2026-40963). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.2.2` or later.
|
| CVE-2026-10241 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-10241 (CVE-2026-10241)
SSRF in CVE-2026-10241 (CVE-2026-10241). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10243 |
|
Authentication Bypass in CVE-2026-10243 (CVE-2026-10243)
authentication bypass in CVE-2026-10243 (CVE-2026-10243). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10242 |
|
Vulnerability in sqli (CVE-2026-10242)
vulnerability in sqli (CVE-2026-10242). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10517 |
|
SSRF (Server-Side Request Forgery) in github.com/quay/claircore (CVE-2026-10517)
SSRF in github.com/quay/claircore (CVE-2026-10517). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10240 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-10240 (CVE-2026-10240)
SSRF in CVE-2026-10240 (CVE-2026-10240). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10237 |
|
Vulnerability in sqli (CVE-2026-10237)
vulnerability in sqli (CVE-2026-10237). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10236 |
|
Vulnerability in CVE-2026-10236 (CVE-2026-10236)
vulnerability in CVE-2026-10236 (CVE-2026-10236). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-10239 |
|
SSRF (Server-Side Request Forgery) in CVE-2026-10239 (CVE-2026-10239)
SSRF in CVE-2026-10239 (CVE-2026-10239). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21920-1 |
|
Vulnerability in SUSE-SU-2026:21920-1 (SUSE-SU-2026:21920-1)
vulnerability in SUSE-SU-2026:21920-1 (SUSE-SU-2026:21920-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21878-1 |
|
Vulnerability in SUSE-SU-2026:21878-1 (SUSE-SU-2026:21878-1)
vulnerability in SUSE-SU-2026:21878-1 (SUSE-SU-2026:21878-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21936-1 |
|
Vulnerability in SUSE-SU-2026:21936-1 (SUSE-SU-2026:21936-1)
vulnerability in SUSE-SU-2026:21936-1 (SUSE-SU-2026:21936-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21896-1 |
|
Vulnerability in SUSE-SU-2026:21896-1 (SUSE-SU-2026:21896-1)
vulnerability in SUSE-SU-2026:21896-1 (SUSE-SU-2026:21896-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21931-1 |
|
Vulnerability in SUSE-SU-2026:21931-1 (SUSE-SU-2026:21931-1)
vulnerability in SUSE-SU-2026:21931-1 (SUSE-SU-2026:21931-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21909-1 |
|
Vulnerability in SUSE-SU-2026:21909-1 (SUSE-SU-2026:21909-1)
vulnerability in SUSE-SU-2026:21909-1 (SUSE-SU-2026:21909-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21928-1 |
|
Vulnerability in SUSE-SU-2026:21928-1 (SUSE-SU-2026:21928-1)
vulnerability in SUSE-SU-2026:21928-1 (SUSE-SU-2026:21928-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21929-1 |
|
Vulnerability in SUSE-SU-2026:21929-1 (SUSE-SU-2026:21929-1)
vulnerability in SUSE-SU-2026:21929-1 (SUSE-SU-2026:21929-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21930-1 |
|
Vulnerability in SUSE-SU-2026:21930-1 (SUSE-SU-2026:21930-1)
vulnerability in SUSE-SU-2026:21930-1 (SUSE-SU-2026:21930-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21926-1 |
|
Vulnerability in SUSE-SU-2026:21926-1 (SUSE-SU-2026:21926-1)
vulnerability in SUSE-SU-2026:21926-1 (SUSE-SU-2026:21926-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21925-1 |
|
Vulnerability in SUSE-SU-2026:21925-1 (SUSE-SU-2026:21925-1)
vulnerability in SUSE-SU-2026:21925-1 (SUSE-SU-2026:21925-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21905-1 |
|
Vulnerability in SUSE-SU-2026:21905-1 (SUSE-SU-2026:21905-1)
vulnerability in SUSE-SU-2026:21905-1 (SUSE-SU-2026:21905-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21908-1 |
|
Vulnerability in SUSE-SU-2026:21908-1 (SUSE-SU-2026:21908-1)
vulnerability in SUSE-SU-2026:21908-1 (SUSE-SU-2026:21908-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21904-1 |
|
Vulnerability in SUSE-SU-2026:21904-1 (SUSE-SU-2026:21904-1)
vulnerability in SUSE-SU-2026:21904-1 (SUSE-SU-2026:21904-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21906-1 |
|
Vulnerability in SUSE-SU-2026:21906-1 (SUSE-SU-2026:21906-1)
vulnerability in SUSE-SU-2026:21906-1 (SUSE-SU-2026:21906-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21907-1 |
|
Vulnerability in SUSE-SU-2026:21907-1 (SUSE-SU-2026:21907-1)
vulnerability in SUSE-SU-2026:21907-1 (SUSE-SU-2026:21907-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21903-1 |
|
Vulnerability in SUSE-SU-2026:21903-1 (SUSE-SU-2026:21903-1)
vulnerability in SUSE-SU-2026:21903-1 (SUSE-SU-2026:21903-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21927-1 |
|
Vulnerability in SUSE-SU-2026:21927-1 (SUSE-SU-2026:21927-1)
vulnerability in SUSE-SU-2026:21927-1 (SUSE-SU-2026:21927-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21924-1 |
|
Vulnerability in SUSE-SU-2026:21924-1 (SUSE-SU-2026:21924-1)
vulnerability in SUSE-SU-2026:21924-1 (SUSE-SU-2026:21924-1). Risk of unauthorized operations or information disclosure.
|
| SUSE-SU-2026:21923-1 |
|
Vulnerability in SUSE-SU-2026:21923-1 (SUSE-SU-2026:21923-1)
vulnerability in SUSE-SU-2026:21923-1 (SUSE-SU-2026:21923-1). Risk of unauthorized operations or information disclosure.
|