Apache Airflow Ssh Provider (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 2 in the last 30 days, 1 known versions, newest CVE from 2026-10-26. Vendor: Apache Software Foundation.

CVEs of Apache Airflow Ssh Provider

• CVE-2026-111422, 2026-10-26: In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated `environment` parameter only once, although they are…
• CVE-2026-94134 - CVSS 9.1 (critical), 2026-10-15: The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless `host_key` is configured or `no_host_key_check` is explicitly set…