- Vendor / Project
- Apache
- Product
- Airflow
- Date added
- Jan 18, 2022
- Due date
- Jul 18, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-78
Description
A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow.
Required action
Apply updates per vendor instructions.