BIT-airflow-2026-30912

vendorUSosv

Apache Airflow: Exposing stack trace in case of constraint error

Advisory ansehen veröffentlicht 2026-04-21Lizenz: per source

In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to false. That could lead to exposing additional information to potential attacker. Users are recommended to upgrade to Apache Airflow 3.2.0, which fixes the issue.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-30912US	—	0.45% (39th)	—	2026-04-18
In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to false. That could lead to exposing additional information to…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

http://www.openwall.com/lists/oss-security/2026/04/17/5ADVISORY
https://github.com/apache/airflow/pull/63028REPORT
https://lists.apache.org/thread/tp6kz1hnfb3zsrrtg19myo8x5x80w8r9ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2026-30912WEB

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan