Andrew Rukin (Arenadata)

Apache Airflow: Scheduler: next_kwargs deserialized before the dict check, so resume data still invokes constructors

Apache Airflow: Shell command injection in the example_dag_decorator example Dag via an IPv6 zone identifier

Apache Airflow: Connections test API: team-scope guard bypass resolves another team's environment Connection

Apache Airflow: Config API: team-scoped Celery broker secret disclosed to a Viewer (multi-team masking bypass)

Apache Airflow: Task-instance API exposes secrets in deferred trigger kwargs

Apache Airflow Amazon provider: AWS auth manager: SAML login CSRF logs users into the attacker's account

Apache Impala: Impala Executor Webserver Auth Bypass

Apache Impala: Path traversal executes JARs outside trusted paths

Apache Impala: Stored XSS in Impala query plans

Apache Airflow Teradata provider: SQL injection via unvalidated Dag Params in the compute-cluster example Dag