Apache fixes 12 Apache Kylin vulnerabilities, including critical CVE-2026-64959, plus Apache Airflow SSH flaws. Upgrade Kylin to 5.0.5 now.
Apache Airflow
A critical Apache Airflow vulnerability highlights a severe Airflow scheduler flaw. Upgrade to version 3.2.2 or later to prevent exploits.
Apache Airflow patched two flaws leaking sensitive credentials in the UI. The Moderate bug exposes secrets in DAG tracebacks (kwargs). Also fixed: secrets visible in rendered templates. Update to v3.1.4.
Apache Airflow 3.0.3 has a bug (CVE-2025-54831) exposing sensitive connection details, including passwords, to all users with only READ permissions. Update immediately.
Discover the vulnerabilities in Azure Data Factory's integration with Apache Airflow. Learn how attackers can achieve shadow administrator control and remote code execution.
Discover the potential security risks posed by a vulnerability in Apache Airflow (CVE-2024-45784). Ensure your system is protected.
Apache Airflow has released a security update to address a potentially severe code execution vulnerability (CVE-2024-39877)
Apache Airflow has published a security advisory to warn users about multiple vulnerabilities affecting many of its packages.
CVE-2022-38054 affects Apache Airflow versions 2.2.4 through 2.3.3. Apache Airflow could allow a remote attacker to hijack a user's session