Apache-airflow-providers-cncf-kubernetes (Apache) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 220 known versions, newest CVE from 2026-05-19. Vendor: Apache.

CVEs of Apache-airflow-providers-cncf-kubernetes

• CVE-2026-27173 - CVSS 8.7 (high), 2026-05-19: JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had read only access to Kuberentes Pods. This could allow users…
• CVE-2023-51702 - CVSS 6.5 (medium), 2024-01-24: Since version 5.2.0, when using deferrable mode with the path of a Kubernetes configuration file for authentication, the Airflow worker serializes this…
• CVE-2023-33234 - CVSS 7.2 (high), 2023-05-30: Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow…