CRITICAL9.8
PYSEC-2022-263
Quick fix
PYSEC-2022-263 — apache-airflow: upgrade to the fixed version with the command below.
pip install --upgrade 'apache-airflow>=2.3.4rc1'Details
In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixation.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/apache-airflow
Introduced in:
2.2.4Fixed in: 2.3.4rc1Fix
pip install --upgrade 'apache-airflow>=2.3.4rc1'