AP
Product
Apache-airflow-providers-sftp
by Apache · last CVE Jun 17, 2026
1
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch

Add Apache-airflow-providers-sftp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-50203
9.1
1%
Jun 17
Apache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory allows local file write outside the destination directory via malicious server-supplied directory-entry names
Affected: before 5.8.1
Showing 1