GHSA-j69x-v4wc-3fpf critical
Apache Airflow Sqoop Provider Improper Input Validation vulnerability
Affected range
ECOSYSTEM: introduced 0; fixed 3.1.1Fixed versions: 3.1.1
Provider package apache-airflow-providers-apache-sqoop for Apache Airflow
Evidence path
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
Latest version
4.2.1
No matching published advisory returned
Known exploitation
No KEV match
Checked by exact CVE identifier
Highest advisory severity
Critical
2 active advisories
The registry confirms the version, then OSV checks advisories for that exact value.
Published records
Affected range
ECOSYSTEM: introduced 0; fixed 3.1.1Fixed versions: 3.1.1
Affected range
ECOSYSTEM: introduced 0; fixed 4.0.0Fixed versions: 4.0.0