← All credits
OpenSec Intelligence
4 vulnerability records and advisories credit this contributor.
CVE-2026-86468
Apache Airflow: CLI argv masking misses Variable values and --conn-extra, persisting secrets in audit logs
CVE-2026-86473
Apache Airflow: Logout ignores a presented Authorization bearer token, leaving it revocable only by expiry
CVE-2026-92228
Apache Airflow Keycloak provider: Keycloak multi-team provisioning grants every team role global audit-log read
CVE-2026-86462
Apache Airflow FAB provider: FAB Admin password PATCH does not invalidate database-backed sessions