Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Apache Airflow — Vulnerabilities & Security Advisories 146

All 146 CVE vulnerabilities found in Apache Airflow, with AI-generated Chinese analysis, references, and POCs.

This page documents security weaknesses associated with the Apache Airflow workflow orchestration tool, categorized under common vulnerability types and industry-standard tags. It aggregates a comprehensive collection of identified security flaws, including those related to authentication bypass, insecure configuration, and remote code execution risks. The data spans from the initial public release of the software through the most recent updates, ensuring a historical perspective on the product's security posture over time. Visitors to this page can effectively track vendor advisories and official patch releases to stay informed about critical fixes as they are issued. Additionally, users can gain a deeper understanding of specific weakness classes affecting the platform, analyzing how particular defect categories manifest within its architecture. The resource also allows for a detailed lookup of the product’s vulnerability history, enabling security professionals to review past incidents and assess the evolution of risk over various versions. This structured approach supports informed decision-making for system administrators and DevOps engineers responsible for maintaining secure deployment environments. By consolidating these data points, the page serves as a central reference for evaluating the ongoing security health of Apache Airflow installations. It facilitates proactive risk management by highlighting trends and recurring issues that may require immediate attention or mitigation strategies. The information provided is intended solely for technical assessment and does not constitute professional security advice. Users are encouraged to cross-reference this data with official documentation and community reports for the most accurate and timely guidance.

Vendor: Apache Software Foundation

CVE IDTitleCVSSSeverityPublished
CVE-2021-45230 Apache Airflow: Creating DagRuns didn't respect Dag-level permissions in the Webserver 6.5 -2022-01-20
CVE-2021-38540 Apache Airflow: Variable Import endpoint missed authentication check CWE-269 9.8 -2021-09-09
CVE-2021-35936 No Authentication on Logging Server CWE-200 5.3 -2021-08-16
CVE-2021-28359 Apache Airflow Reflected XSS via Origin Query Argument in URL 6.1 -2021-05-02
CVE-2021-26697 Apache Airflow: Lineage API endpoint for Experimental API missed authentication check CWE-269 5.3 -2021-02-17
CVE-2021-26559 CWE-284 Improper Access Control on Configurations Endpoint for the Stable API CWE-284 8.1 -2021-02-17
CVE-2020-17526 Apache Airflow Webserver 安全漏洞 6.5 -2020-12-21
CVE-2020-17511 Apache Airflow 加密问题漏洞 6.5 -2020-12-14
CVE-2020-17513 Apache Airflow 代码问题漏洞 CWE-918 5.3 -2020-12-14
CVE-2020-17515 Apache Airflow 跨站脚本漏洞 6.1 -2020-12-11
CVE-2020-13927 Apache Airflow 安全漏洞 9.8 -2020-11-10
CVE-2020-13944 Apache Airflow 跨站脚本漏洞 6.1 -2020-09-17
CVE-2020-9485 Apache Airflow 跨站脚本漏洞 5.4 -2020-07-16
CVE-2020-11983 Apache Airflow 跨站脚本漏洞 5.4 -2020-07-16
CVE-2020-11982 Apache Airflow 代码问题漏洞 9.8 -2020-07-16
CVE-2020-11981 Apache Airflow 操作系统命令注入漏洞 9.8 -2020-07-16
CVE-2020-11978 Apache Airflow 操作系统操作系统命令注入漏洞 8.8 -2020-07-16
CVE-2019-12417 Apache Airflow 跨站脚本漏洞 4.8 -2019-10-30
CVE-2019-0216 Apache Airflow 跨站脚本漏洞 4.8 -2019-04-10
CVE-2019-0229 Apache Airflow 跨站请求伪造漏洞 8.8 -2019-04-10
CVE-2018-20244 Apache Airflow 跨站脚本漏洞 4.8 -2019-02-27
CVE-2017-15720 Apache Airflow 输入验证漏洞 8.8 -2019-01-23
CVE-2017-17835 Apache Airflow 跨站请求伪造漏洞 8.8 -2019-01-23
CVE-2017-17836 Apache Airflow 信任管理问题漏洞 9.8 -2019-01-23
CVE-2018-20245 Apache Airflow 安全漏洞 7.5 -2019-01-23
CVE-2017-12614 Apache Airflow 跨站脚本漏洞 6.1 -2018-08-06

All 146 known CVE vulnerabilities affecting Apache Airflow with full Chinese analysis, references, and POCs where available.