Apache Airflow Ftp Provider (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-06-26. Vendor: Apache Software Foundation.

CVEs of Apache Airflow Ftp Provider

• CVE-2026-49486 - CVSS 7.5 (high), 2026-06-26: The Apache Airflow FTP provider's `FTPSHook.get_conn()` created an `ftplib.FTP_TLS` connection but never called `prot_p()`, so although the control channel…
• CVE-2024-29733 - CVSS 2.7 (low), 2024-04-21: Improper Certificate Validation vulnerability in Apache Airflow FTP Provider. The FTP hook lacks complete certificate validation in FTP_TLS connections, which…