GHSA-5f35-pq34-c87q moderate
Apache Airflow missing Certificate Validation
Affected range
ECOSYSTEM: introduced 0; fixed 3.3.0Fixed versions: 3.3.0
Provider package apache-airflow-providers-imap for Apache Airflow
Evidence path
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
Latest version
3.12.1
No matching published advisory returned
Known exploitation
No KEV match
Checked by exact CVE identifier
Highest advisory severity
Moderate
1 active advisory
The registry confirms the version, then OSV checks advisories for that exact value.
Published records
Affected range
ECOSYSTEM: introduced 0; fixed 3.3.0Fixed versions: 3.3.0