CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-82440

    🚨 CVE-2026-82440 Description Nimbus instantiates the class named by a topology's `topology.scheduler.strategy` when scheduling it. The allowlist...

  • CVE-2026-86468

    🚨 CVE-2026-86468 Apache Airflow's CLI records its arguments in the audit log but masks secrets by argument position, so some supported command...

  • CVE-2026-86829

    🚨 CVE-2026-86829 Apache Airflow's scheduler fully deserializes XCom values written by task code while evaluating task dependencies. A Dag author...

  • CVE-2026-92683

    🚨 CVE-2026-92683 Incorrect authorization in the @authentication directive JWT where filter evaluation in Neo4j @neo4j/graphql versions 7.0.0...

  • CVE-2026-96285

    🚨 CVE-2026-96285 Apache Airflow 3.3.1 shipped a fix for CVE-2026-67260 that checks the scheduler's decoded `next_kwargs` value is a dictionary...

  • CVE-2026-13595

    🚨 CVE-2026-13595 A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and...

  • CVE-2026-50240

    🚨 CVE-2026-50240 A flaw was found in OpenShift Pipelines-as-Code (PAC). PAC does not verify whether the creator of a Repository custom resource...

  • CVE-2026-107474

    🚨 CVE-2026-107474 The Apache Airflow connections API did not mask the apprise provider's `config` connection extra, which can embed...

  • CVE-2026-111395

    🚨 CVE-2026-111395 Apache Airflow did not reject reserved serialization keys inside a Dag run's `conf`. A user allowed to trigger a Dag that uses a...

  • CVE-2026-111452

    🚨 CVE-2026-111452 Apache Airflow's secrets masker matched sensitive key names only in their snake_case form, so values stored under camelCase keys...

  • CVE-2026-113504

    🚨 CVE-2026-113504 Apache Airflow's secrets masker stopped descending into nested structures after five levels, so a secret registered with the...

  • CVE-2026-113508

    🚨 CVE-2026-113508 Apache Airflow's logout endpoint attempted to revoke the presented token on the server, but any failure during revocation was...

  • CVE-2026-40913

    🚨 CVE-2026-40913 Apache Airflow's public Import Errors API returns the raw parse-failure stack trace to any user with the `ImportError.can_read`...

  • CVE-2026-50204

    🚨 CVE-2026-50204 Apache Airflow's audit log stored Connection and Variable secret values in cleartext in the `Log.extra` column because the...

  • CVE-2026-76185

    🚨 CVE-2026-76185 Apache Airflow's Task SDK secret cache built its keys from the team name and secret id with unescaped `_` delimiters, so...

  • CVE-2026-82436

    🚨 CVE-2026-82436 Description `DefaultStateSerializer`, used to persist and restore stateful bolt checkpoints, configured Kryo with class...

  • CVE-2026-82440

    🚨 CVE-2026-82440 Description Nimbus instantiates the class named by a topology's `topology.scheduler.strategy` when scheduling it. The allowlist...

  • CVE-2026-86829

    🚨 CVE-2026-86829 Apache Airflow's scheduler fully deserializes XCom values written by task code while evaluating task dependencies. A Dag author...

Статистика статей

Статьи
53,082
Просмотры
209,808
Независимый арбитраж: В случае возникновения споров или несоответствия товара описанию, сервис выступает в качестве арбитра, принимая объективное решение на основе заранее оговоренных условий.
Назад
Сверху