HIGH8.8
PYSEC-2019-147
Quick fix
PYSEC-2019-147 — apache-airflow: upgrade to the fixed version with the command below.
pip install --upgrade 'apache-airflow>=1.9.0'Details
In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object.
Are you affected?
Enter the version of the package you're using.