GHSA-x8mh-94wc-33gv moderate
apache-airflow-providers-smtp: No certificate validation on SMTP STARTTLS connections in SMTP provider
Affected range
ECOSYSTEM: introduced 2.0.0; fixed 3.0.0Fixed versions: 3.0.0
Provider package apache-airflow-providers-smtp for Apache Airflow
Evidence path
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
Latest version
3.0.4
No matching published advisory returned
Known exploitation
No KEV match
Checked by exact CVE identifier
Highest advisory severity
Moderate
2 active advisories
The registry confirms the version, then OSV checks advisories for that exact value.
Published records
Affected range
ECOSYSTEM: introduced 2.0.0; fixed 3.0.0Fixed versions: 3.0.0
Affected range
ECOSYSTEM: introduced 0; fixed 1.3.0Fixed versions: 1.3.0