Apache Airflow: JWT cookie missing Secure flag in JWTRefreshMiddleware behind HTTPS-terminating proxy

In Apache Airflow before 1.10.2, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views

Apache Airflow: Arbitrary airflow.* class instantiation on the API server via the XCom deserialize endpoint

Apache Airflow: Connections test API: team-scope guard bypass resolves another team's environment Connection

Apache Airflow: Assets events API returns asset events for every Dag with no per-Dag authorization filter

Apache Airflow: Airflow Variables were not masked in the UI for authenticated users

Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target

Apache Airflow: per-DAG RBAC bypass on /ui/partitioned_dag_runs endpoints

Apache Airflow: Event Log detail endpoint bypasses DAG-scoped event log permission filter

Apache Airflow: Dags endpoint might provide access to otherwise inaccessible entities

Apache Airflow: Assets graph view bypasses DAG level access control displaying unrelated topologies and all DAGs names to unauthorized users

Apache Airflow: Session cookie silently overrides explicit Authorization bearer header, enabling session fixation

Apache Airflow: 3.x - Nested Variable Secret Values Bypass Redaction via max_depth=1

Apache Airflow: DAG authorization bypass on /ui/structure/structure_data

Apache Airflow: Log server JWT authorization bypass via Python lstrip() character stripping allows cross-Dag log access