描述
Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs. Users are recommended to upgrade to version 2.9.1, which fixes this issue.
AI分析AI驱动
受影响产品
apacheairflow
2.9.0
apacheairflow
2.9.0
apacheairflow
2.9.0
apacheairflow
2.9.0
apacheairflow
2.9.0
apacheairflow
2.9.0
参考资料
- http://www.openwall.com/lists/oss-security/2024/05/14/1Mailing ListThird Party Advisory
- https://github.com/apache/airflow/pull/38882Issue TrackingPatch
- https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77Mailing ListVendor Advisory
- http://www.openwall.com/lists/oss-security/2024/05/14/1Mailing ListThird Party Advisory
- https://github.com/apache/airflow/pull/38882Issue TrackingPatch
- https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77Mailing ListVendor Advisory