Apache

Airflow Cncf Kubernetes

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2023-51702

  • EPSS 0.06%
  • Published 24.01.2024 13:15:08
  • Last modified 11.06.2025 17:15:36

Since version 5.2.0, when using deferrable mode with the path of a Kubernetes configuration file for authentication, the Airflow worker serializes this configuration file as a dictionary and sends it to the triggerer by storing it in metadata without...

7.2

CVE-2023-33234

  • EPSS 0.26%
  • Published 30.05.2023 11:15:09
  • Last modified 21.11.2024 08:05:12

Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow connection. In order to exploit this weakness, a user would already need elevated permissions (Op or...