CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-49487

    🚨 CVE-2026-49487 In Apache Airflow before 3.3.0, the REST API task-instance detail and list endpoints returned a deferred task's trigger kwargs...

  • CVE-2026-54183

    🚨 CVE-2026-54183 Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI. The masker's...

  • CVE-2026-58076

    🚨 CVE-2026-58076 Apache Airflow's serialization layer reconstructed exception nodes by calling `import_string()` on a class name taken from the...

  • CVE-2026-59242

    🚨 CVE-2026-59242 Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true` endpoint passed a string-literal payload through...

  • CVE-2026-59244

    🚨 CVE-2026-59244 Apache Airflow's secrets masker did not mask `var.json` Variable values whose value is a dict in the Rendered Templates UI — the...

  • CVE-2026-65017

    🚨 CVE-2026-65017 Apache Airflow's Config API did not mask team-scoped sensitive configuration values in multi-team deployments. When an...

  • CVE-2026-67260

    🚨 CVE-2026-67260 Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new `awaiting_input` task state swept by the...

  • CVE-2026-67587

    🚨 CVE-2026-67587 Apache Airflow's Task SDK rebuilt a `Callback` object from serialized data by re-running its constructor, which imports the...

  • CVE-2026-68076

    🚨 CVE-2026-68076 Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope...

  • CVE-2026-68968

    🚨 CVE-2026-68968 Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the `backfill_id` path...

  • CVE-2026-68969

    🚨 CVE-2026-68969 Apache Airflow wrote Variable values and Connection `extra` contents to the audit log in cleartext when they were submitted...

  • CVE-2026-68970

    🚨 CVE-2026-68970 Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so secrets stored in that shape...

  • CVE-2026-68971

    🚨 CVE-2026-68971 Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the XCom result check on...

  • CVE-2026-87853

    🚨 CVE-2026-87853 A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier...

  • CVE-2026-75157

    🚨 CVE-2026-75157 Apache Airflow's asset queued-events DELETE endpoints checked the caller's Dag-axis permission with `READ` instead of `EDIT`. Any...

  • CVE-2026-82355

    🚨 CVE-2026-82355 When a request to the Airflow core API carries both a session cookie and an explicit `Authorization: Bearer` token, Airflow...

  • CVE-2026-86473

    🚨 CVE-2026-86473 Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie. When a client logs out...

  • CVE-2026-98432

    🚨 CVE-2026-98432 In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period...

Статистика статей

Статьи
53,092
Просмотры
273,024
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху