HIGH8.8
PYSEC-2019-148
Quick fix
PYSEC-2019-148 — apache-airflow: upgrade to the fixed version with the command below.
pip install --upgrade 'apache-airflow>=1.9.0'Details
In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow.
Are you affected?
Enter the version of the package you're using.