Apache Airflow: Execution API JWT leaked via KubernetesExecutor worker command-line args
Modified: 7/13/2026
package
pkg:pypi/apache-airflow-core
Apache Airflow: Execution API JWT leaked via KubernetesExecutor worker command-line args
Modified: 7/13/2026
Apache Airflow allows code execution through crafted XCom payloads
Modified: 7/13/2026
Apache Airflow allows users with asset materialize permissions to trigger DAGs outside of their permissions
Modified: 7/13/2026
Apache Airflow exposes SQL stack trace despite "api/expose_stack_traces" set to false
Modified: 7/13/2026
Apache Airflow Exposes Secrets in Variables Saved as JSON Dictionaries
Modified: 7/13/2026
Apache Airflow: Execution API JWT leaked via KubernetesExecutor worker command-line args
Modified: 7/13/2026
Apache Airflow allows code execution through crafted XCom payloads
Modified: 7/13/2026
Apache Airflow allows users with asset materialize permissions to trigger DAGs outside of their permissions
Modified: 7/13/2026
Apache Airflow exposes SQL stack trace despite "api/expose_stack_traces" set to false
Modified: 7/13/2026
Apache Airflow Exposes Secrets in Variables Saved as JSON Dictionaries
Modified: 7/13/2026