HIGH7.2PyPI
PYSEC-2026-1143· CVE-2023-33234, GHSA-2rx4-9f5h-9gjfApache Airflow CNCF Kubernetes Provider: KubernetesPodOperator RCE via connection configuration
Modified: 7/7/2026
package
PyPI/apache-airflow-providers-cncf-kubernetes
pkg:pypi/apache-airflow-providers-cncf-kubernetes
MEDIUM6.5PyPI
PYSEC-2026-1144· BIT-airflow-2023-51702, CVE-2023-51702Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service
Modified: 7/13/2026
HIGH8.7PyPI
PYSEC-2026-2365· CVE-2026-27173, GHSA-524w-vq63-2xhfApache Airflow CNCF Kubernetes provider: JWT Token Exposure in KubernetesExecutor Command-Line Arguments
Modified: 7/13/2026
HIGH7.2PyPI
GHSA-2rx4-9f5h-9gjf· CVE-2023-33234, PYSEC-2026-1143Apache Airflow CNCF Kubernetes Provider: KubernetesPodOperator RCE via connection configuration
Modified: 7/7/2026
HIGH8.7PyPI
GHSA-524w-vq63-2xhf· CVE-2026-27173, PYSEC-2026-2365Apache Airflow CNCF Kubernetes provider: JWT Token Exposure in KubernetesExecutor Command-Line Arguments
Modified: 7/13/2026
MEDIUM6.5PyPI
GHSA-mg2x-mggj-6955· BIT-airflow-2023-51702, CVE-2023-51702Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service
Modified: 7/13/2026