Apache Airflow Amazon Provider (Apache Software Foundation) - vulnerabilities (CVEs)

3 CVEs, 1 in the last 30 days, 2 known versions, newest CVE from 2026-10-20. Vendor: Apache Software Foundation.

CVEs of Apache Airflow Amazon Provider

• CVE-2026-86467, 2026-10-20: Apache Airflow Amazon provider: the AWS auth manager's SAML login flow does not bind the authentication response to the browser that began it. The login…
• CVE-2026-68872 - CVSS 6.5 (medium), 2026-08-10: The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team-scoped Connection or Variable id…
• CVE-2026-42526 - CVSS 5.3 (medium), 2026-05-19: In the AWS Secrets Manager and SSM Parameter Store secrets backends of `apache-airflow-providers-amazon` prior to 9.28.0, the team-scoping logic could resolve…