Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2022-41672

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-3q8r-f3pj-3gc4

Apache Airflow may allow authenticated users who have been deactivated to continue using the UI or API In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being able to continue using the UI or API.

gitlab/pypi/apache-airflow/CVE-2022-41672

Apache Airflow may allow authenticated users who have been deactivated to continue using the UI or API In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being able to continue using the UI or API.

pypa/apache-airflow/PYSEC-2022-42983

In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being able to continue using the UI or API.

pysec/PYSEC-2022-42983

In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being able to continue using the UI or API.