AP
Product
Apache-airflow-providers-google
6
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 3Medium 2Low 0
Watch
Add Apache-airflow-providers-google to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-49297 | 8.1 | Jul 6 | Apache Airflow Google provider: Path traversal via GCS object names → local/SFTP filesystem (GCSToSFTPOperator + GCSTimeSpanFileTransformOperator) Affected: before 22.2.1 |
| CVE-2026-45361 | 8.1 | May 25 | Apache Airflow Google provider: SSH host key verification disabled in ComputeEngineSSHHook (paramiko AutoAddPolicy default) Affected: before 22.0.0 |
| CVE-2023-25692 | 7.5 | Feb 24 | Improper Input Validation vulnerability in the Apache Airflow Google Provider Affected: before 8.10.0 |
Showing 3