GHSA-524w-vq63-2xhf high
Apache Airflow CNCF Kubernetes provider: JWT Token Exposure in KubernetesExecutor Command-Line Arguments
Affected range
ECOSYSTEM: introduced 0; fixed 10.17.0Fixed versions: 10.17.0
apache-airflow-providers-cncf-kubernetes
Provider package apache-airflow-providers-cncf-kubernetes for Apache Airflow
PyPI latest 10.22.0 Apache-2.0
Evidence path
Version, exploitation, severity
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
1
Latest version
10.22.0
No matching published advisory returned
2
Known exploitation
No KEV match
Checked by exact CVE identifier
3
Highest advisory severity
High
3 active advisories
Check an exact version
The registry confirms the version, then OSV checks advisories for that exact value.
Published records
Advisories
GHSA-2rx4-9f5h-9gjf high
Apache Airflow CNCF Kubernetes Provider: KubernetesPodOperator RCE via connection configuration
Affected range
ECOSYSTEM: introduced 5.0.0; fixed 7.0.0Fixed versions: 7.0.0
GHSA-mg2x-mggj-6955 moderate
Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service
Affected range
ECOSYSTEM: introduced 5.2.0; fixed 7.0.0Fixed versions: 7.0.0