CVE-2023-25691

Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google Provider versions before 8.10.0.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security@apache.org

Published

2023-02-24

Last modified

2025-03-11

Weaknesses

CWE-20

Affected products

• Apache-airflow-providers-google (Apache)
• Apache Airflow Google Provider (Apache Software Foundation)

References

• https://github.com/apache/airflow/pull/29497
• https://lists.apache.org/thread/zdr8ovfttbh7kj0lydgcw88tbt2nmkcy