AP
Product
Apache-airflow-providers-google
6
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 3Medium 2Low 0
Watch
Add Apache-airflow-providers-google to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-25691 | 9.8 | Feb 24 | Improper Input Validation vulnerability in the Apache Airflow Google Provider Affected: before 8.10.0 |
| CVE-2026-49297 | 8.1 | Jul 6 | Apache Airflow Google provider: Path traversal via GCS object names → local/SFTP filesystem (GCSToSFTPOperator + GCSTimeSpanFileTransformOperator) Affected: before 22.2.1 |
| CVE-2026-45361 | 8.1 | May 25 | Apache Airflow Google provider: SSH host key verification disabled in ComputeEngineSSHHook (paramiko AutoAddPolicy default) Affected: before 22.0.0 |
| CVE-2023-25692 | 7.5 | Feb 24 | Improper Input Validation vulnerability in the Apache Airflow Google Provider Affected: before 8.10.0 |
| CVE-2026-68868 | 6.5 | Aug 12 | Apache Airflow Google provider: google Secret Manager backend: team scope is never applied, exposing every team's Connections and Variables Affected: before 22.3.0 |
| CVE-2026-81914 | 4.3 | Sep 29 | Apache Airflow Google provider: Google Drive query injection via unescaped file and folder names Affected: before 22.6.0 |
Showing 6