Apache Airflow Cncf Kubernetes Provider (Apache Software Foundation) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-05-19. Vendor: Apache Software Foundation.

CVEs of Apache Airflow Cncf Kubernetes Provider

• CVE-2026-27173 - CVSS 8.7 (high), 2026-05-19: JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had read only access to Kuberentes Pods. This could allow users…
• CVE-2023-51702 - CVSS 6.5 (medium), 2024-01-24: Since version 5.2.0, when using deferrable mode with the path of a Kubernetes configuration file for authentication, the Airflow worker serializes this…
• CVE-2023-33234 - CVSS 7.2 (high), 2023-05-30: Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow…