Apache Airflow Providers Keycloak (Apache Software Foundation) - vulnerabilities (CVEs)
1 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-04-18. Vendor: Apache Software Foundation.
CVEs of Apache Airflow Providers Keycloak
- CVE-2026-40948 - CVSS 5.4 (medium), 2026-04-18: The Keycloak authentication manager in `apache-airflow-providers-keycloak` did not generate or validate the OAuth 2.0 `state` parameter on the login /…