PYSEC-2026-19

vendorUSosv

Advisory ansehen veröffentlicht 2026-04-18Lizenz: CC-BY-4.0

Secrets in Variables saved as JSON dictionaries were not properly redacted - in case thee variables were retrieved by the user the secrets stored as nested fields were not masked. If you do not store variables with sensitive values in JSON form, you are not affected. Otherwise please upgrade to Apache Airflow 3.2.0 that has the fix implemented

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-32690US	—	0.42% (36th)	—	2026-04-18
Secrets in Variables saved as JSON dictionaries were not properly redacted - in case thee variables were retrieved by the user the secrets stored as nested fields were not masked.…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

http://www.openwall.com/lists/oss-security/2026/04/17/6ADVISORY
https://github.com/advisories/GHSA-w9r4-94fj-xp69ADVISORY
https://github.com/apache/airflow/pull/63480REPORT
https://lists.apache.org/thread/7rnzxofntcznqxnhsmjvvlvygwph7rn5ADVISORY

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan