{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/8988?format=json","vulnerability_id":"VCID-cxqa-pqca-pqgc","summary":"Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded and not-sanitized javascript in the parameter description field of the DAG. This Javascript can be executed on the client side of any of the user who looks at the tasks in the browser sandbox. While this issue does not allow to exit the browser sandbox or manipulation of the server-side data - more than the DAG author already has, it allows to modify what the user looking at the DAG details sees in the browser - which opens up all kinds of possibilities of misleading other users.\n\nUsers of Apache Airflow are recommended to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability","aliases":[{"alias":"BIT-airflow-2023-47265"},{"alias":"CVE-2023-47265"},{"alias":"GHSA-pxch-wr7m-rwxj"},{"alias":"PYSEC-2023-264"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/30901?format=json","purl":"pkg:pypi/apache-airflow@2.8.0b1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.8.0b1"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/30880?format=json","purl":"pkg:pypi/apache-airflow@2.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-1ptn-xvsy-d3hu"},{"vulnerability":"VCID-1tvn-y85f-jkb9"},{"vulnerability":"VCID-2q7x-bua5-37h7"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-7z8j-8f4d-53dm"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-8npr-rvfd-jkfj"},{"vulnerability":"VCID-8ykk-1kak-6bfd"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-d3kc-fn21-xqar"},{"vulnerability":"VCID-dk1y-938p-k3bv"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-hgq2-kuex-y3a3"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-pmtw-nwnc-nyfw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-s49h-br5r-5yh8"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-vj7z-pmk3-cydg"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-vy44-rbar-w3fn"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"},{"vulnerability":"VCID-z5b8-kcbh-m7hr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.6.0"},{"url":"http://public2.vulnerablecode.io/api/packages/30881?format=json","purl":"pkg:pypi/apache-airflow@2.6.1rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-1ptn-xvsy-d3hu"},{"vulnerability":"VCID-1tvn-y85f-jkb9"},{"vulnerability":"VCID-2q7x-bua5-37h7"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-7z8j-8f4d-53dm"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-8npr-rvfd-jkfj"},{"vulnerability":"VCID-8ykk-1kak-6bfd"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-d3kc-fn21-xqar"},{"vulnerability":"VCID-dk1y-938p-k3bv"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-hgq2-kuex-y3a3"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-pmtw-nwnc-nyfw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-s49h-br5r-5yh8"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-vj7z-pmk3-cydg"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-vy44-rbar-w3fn"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"},{"vulnerability":"VCID-z5b8-kcbh-m7hr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.6.1rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/30882?format=json","purl":"pkg:pypi/apache-airflow@2.6.1rc2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-1ptn-xvsy-d3hu"},{"vulnerability":"VCID-1tvn-y85f-jkb9"},{"vulnerability":"VCID-2q7x-bua5-37h7"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-7z8j-8f4d-53dm"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-8npr-rvfd-jkfj"},{"vulnerability":"VCID-8ykk-1kak-6bfd"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-d3kc-fn21-xqar"},{"vulnerability":"VCID-dk1y-938p-k3bv"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-hgq2-kuex-y3a3"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-pmtw-nwnc-nyfw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-s49h-br5r-5yh8"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-vj7z-pmk3-cydg"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-vy44-rbar-w3fn"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"},{"vulnerability":"VCID-z5b8-kcbh-m7hr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.6.1rc2"},{"url":"http://public2.vulnerablecode.io/api/packages/30883?format=json","purl":"pkg:pypi/apache-airflow@2.6.1rc3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-1ptn-xvsy-d3hu"},{"vulnerability":"VCID-1tvn-y85f-jkb9"},{"vulnerability":"VCID-2q7x-bua5-37h7"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-7z8j-8f4d-53dm"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-8npr-rvfd-jkfj"},{"vulnerability":"VCID-8ykk-1kak-6bfd"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-d3kc-fn21-xqar"},{"vulnerability":"VCID-dk1y-938p-k3bv"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-hgq2-kuex-y3a3"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-pmtw-nwnc-nyfw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-s49h-br5r-5yh8"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-vj7z-pmk3-cydg"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-vy44-rbar-w3fn"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"},{"vulnerability":"VCID-z5b8-kcbh-m7hr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.6.1rc3"},{"url":"http://public2.vulnerablecode.io/api/packages/30884?format=json","purl":"pkg:pypi/apache-airflow@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-1ptn-xvsy-d3hu"},{"vulnerability":"VCID-1tvn-y85f-jkb9"},{"vulnerability":"VCID-2q7x-bua5-37h7"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-7z8j-8f4d-53dm"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-8npr-rvfd-jkfj"},{"vulnerability":"VCID-8ykk-1kak-6bfd"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-d3kc-fn21-xqar"},{"vulnerability":"VCID-dk1y-938p-k3bv"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-hgq2-kuex-y3a3"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-pmtw-nwnc-nyfw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-s49h-br5r-5yh8"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-vj7z-pmk3-cydg"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-vy44-rbar-w3fn"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"},{"vulnerability":"VCID-z5b8-kcbh-m7hr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/30885?format=json","purl":"pkg:pypi/apache-airflow@2.6.2rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-1ptn-xvsy-d3hu"},{"vulnerability":"VCID-1tvn-y85f-jkb9"},{"vulnerability":"VCID-2q7x-bua5-37h7"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-7z8j-8f4d-53dm"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-8npr-rvfd-jkfj"},{"vulnerability":"VCID-8ykk-1kak-6bfd"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-d3kc-fn21-xqar"},{"vulnerability":"VCID-dk1y-938p-k3bv"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-hgq2-kuex-y3a3"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-pmtw-nwnc-nyfw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-s49h-br5r-5yh8"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-vj7z-pmk3-cydg"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-vy44-rbar-w3fn"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"},{"vulnerability":"VCID-z5b8-kcbh-m7hr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.6.2rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/30886?format=json","purl":"pkg:pypi/apache-airflow@2.6.2rc2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-1ptn-xvsy-d3hu"},{"vulnerability":"VCID-1tvn-y85f-jkb9"},{"vulnerability":"VCID-2q7x-bua5-37h7"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-7z8j-8f4d-53dm"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-8npr-rvfd-jkfj"},{"vulnerability":"VCID-8ykk-1kak-6bfd"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-d3kc-fn21-xqar"},{"vulnerability":"VCID-dk1y-938p-k3bv"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-hgq2-kuex-y3a3"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-pmtw-nwnc-nyfw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-s49h-br5r-5yh8"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-vj7z-pmk3-cydg"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-vy44-rbar-w3fn"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"},{"vulnerability":"VCID-z5b8-kcbh-m7hr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.6.2rc2"},{"url":"http://public2.vulnerablecode.io/api/packages/30887?format=json","purl":"pkg:pypi/apache-airflow@2.6.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-1ptn-xvsy-d3hu"},{"vulnerability":"VCID-2q7x-bua5-37h7"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-7z8j-8f4d-53dm"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-8npr-rvfd-jkfj"},{"vulnerability":"VCID-8ykk-1kak-6bfd"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-d3kc-fn21-xqar"},{"vulnerability":"VCID-dk1y-938p-k3bv"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-hgq2-kuex-y3a3"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-pmtw-nwnc-nyfw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-s49h-br5r-5yh8"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-vj7z-pmk3-cydg"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-vy44-rbar-w3fn"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"},{"vulnerability":"VCID-z5b8-kcbh-m7hr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.6.2"},{"url":"http://public2.vulnerablecode.io/api/packages/30888?format=json","purl":"pkg:pypi/apache-airflow@2.6.3rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-1ptn-xvsy-d3hu"},{"vulnerability":"VCID-2q7x-bua5-37h7"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-7z8j-8f4d-53dm"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-8npr-rvfd-jkfj"},{"vulnerability":"VCID-8ykk-1kak-6bfd"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-d3kc-fn21-xqar"},{"vulnerability":"VCID-dk1y-938p-k3bv"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-hgq2-kuex-y3a3"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-pmtw-nwnc-nyfw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-s49h-br5r-5yh8"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-vj7z-pmk3-cydg"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-vy44-rbar-w3fn"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"},{"vulnerability":"VCID-z5b8-kcbh-m7hr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.6.3rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/30889?format=json","purl":"pkg:pypi/apache-airflow@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-2q7x-bua5-37h7"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-8npr-rvfd-jkfj"},{"vulnerability":"VCID-8ykk-1kak-6bfd"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-hgq2-kuex-y3a3"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-pmtw-nwnc-nyfw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-s49h-br5r-5yh8"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-vj7z-pmk3-cydg"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"},{"vulnerability":"VCID-z5b8-kcbh-m7hr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/30890?format=json","purl":"pkg:pypi/apache-airflow@2.7.0b1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-2q7x-bua5-37h7"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-8npr-rvfd-jkfj"},{"vulnerability":"VCID-8ykk-1kak-6bfd"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-hgq2-kuex-y3a3"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-pmtw-nwnc-nyfw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-s49h-br5r-5yh8"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-vj7z-pmk3-cydg"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"},{"vulnerability":"VCID-z5b8-kcbh-m7hr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.7.0b1"},{"url":"http://public2.vulnerablecode.io/api/packages/30891?format=json","purl":"pkg:pypi/apache-airflow@2.7.0rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-2q7x-bua5-37h7"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-8npr-rvfd-jkfj"},{"vulnerability":"VCID-8ykk-1kak-6bfd"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-hgq2-kuex-y3a3"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-pmtw-nwnc-nyfw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-s49h-br5r-5yh8"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-vj7z-pmk3-cydg"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"},{"vulnerability":"VCID-z5b8-kcbh-m7hr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.7.0rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/30892?format=json","purl":"pkg:pypi/apache-airflow@2.7.0rc2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-2q7x-bua5-37h7"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-8npr-rvfd-jkfj"},{"vulnerability":"VCID-8ykk-1kak-6bfd"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-hgq2-kuex-y3a3"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-pmtw-nwnc-nyfw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-s49h-br5r-5yh8"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-vj7z-pmk3-cydg"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"},{"vulnerability":"VCID-z5b8-kcbh-m7hr"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.7.0rc2"},{"url":"http://public2.vulnerablecode.io/api/packages/30893?format=json","purl":"pkg:pypi/apache-airflow@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-2q7x-bua5-37h7"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-63fw-ggbk-9ycy"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-8npr-rvfd-jkfj"},{"vulnerability":"VCID-8ykk-1kak-6bfd"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-g9j4-fhpm-uuba"},{"vulnerability":"VCID-hgq2-kuex-y3a3"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-pmtw-nwnc-nyfw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-s49h-br5r-5yh8"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-unq1-wwfg-6ydk"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.7.0"},{"url":"http://public2.vulnerablecode.io/api/packages/30894?format=json","purl":"pkg:pypi/apache-airflow@2.7.1rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-63fw-ggbk-9ycy"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-8npr-rvfd-jkfj"},{"vulnerability":"VCID-8ykk-1kak-6bfd"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-hgq2-kuex-y3a3"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-pmtw-nwnc-nyfw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-s49h-br5r-5yh8"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-unq1-wwfg-6ydk"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.7.1rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/30895?format=json","purl":"pkg:pypi/apache-airflow@2.7.1rc2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-63fw-ggbk-9ycy"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-8npr-rvfd-jkfj"},{"vulnerability":"VCID-8ykk-1kak-6bfd"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-hgq2-kuex-y3a3"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-pmtw-nwnc-nyfw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-s49h-br5r-5yh8"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-unq1-wwfg-6ydk"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.7.1rc2"},{"url":"http://public2.vulnerablecode.io/api/packages/30896?format=json","purl":"pkg:pypi/apache-airflow@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-63fw-ggbk-9ycy"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-8ykk-1kak-6bfd"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-hgq2-kuex-y3a3"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-pmtw-nwnc-nyfw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-unq1-wwfg-6ydk"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.7.1"},{"url":"http://public2.vulnerablecode.io/api/packages/30897?format=json","purl":"pkg:pypi/apache-airflow@2.7.2rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-63fw-ggbk-9ycy"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-8ykk-1kak-6bfd"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-hgq2-kuex-y3a3"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-pmtw-nwnc-nyfw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-unq1-wwfg-6ydk"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.7.2rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/30898?format=json","purl":"pkg:pypi/apache-airflow@2.7.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-unq1-wwfg-6ydk"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.7.2"},{"url":"http://public2.vulnerablecode.io/api/packages/30899?format=json","purl":"pkg:pypi/apache-airflow@2.7.3rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1963-1kyn-2ban"},{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-fctg-457f-4uae"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-unq1-wwfg-6ydk"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.7.3rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/30900?format=json","purl":"pkg:pypi/apache-airflow@2.7.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1azm-hsvr-f3e8"},{"vulnerability":"VCID-4u8d-ezsr-sqcz"},{"vulnerability":"VCID-82p8-yujf-hkdd"},{"vulnerability":"VCID-8m3p-yzr8-yyhj"},{"vulnerability":"VCID-arbk-dryb-qkda"},{"vulnerability":"VCID-cxqa-pqca-pqgc"},{"vulnerability":"VCID-hpf3-3z3m-6ydt"},{"vulnerability":"VCID-j6uh-kx6m-sydp"},{"vulnerability":"VCID-kb4a-mm13-63bj"},{"vulnerability":"VCID-mbgq-fq5n-kufh"},{"vulnerability":"VCID-nfbc-tutd-37bw"},{"vulnerability":"VCID-rysu-xhvt-yqda"},{"vulnerability":"VCID-tpjn-4kru-vucv"},{"vulnerability":"VCID-unq1-wwfg-6ydk"},{"vulnerability":"VCID-vras-f42j-xqfg"},{"vulnerability":"VCID-w8ff-8479-rbfq"},{"vulnerability":"VCID-xwza-guvs-83a9"},{"vulnerability":"VCID-yrx8-dtav-83av"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@2.7.3"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-47265","reference_id":"","reference_type":"","scores":[{"value":"0.00192","scoring_system":"epss","scoring_elements":"0.40983","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-47265"},{"reference_url":"https://github.com/apache/airflow","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/apache/airflow"},{"reference_url":"https://github.com/apache/airflow/commit/0b995602e6e5894ee31625a4dd0e6aa255d2a651","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/apache/airflow/commit/0b995602e6e5894ee31625a4dd0e6aa255d2a651"},{"reference_url":"https://github.com/apache/airflow/pull/35460","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/apache/airflow/pull/35460"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2023-264.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2023-264.yaml"},{"reference_url":"https://lists.apache.org/thread/128f3zl375vb1qv93k82zhnwkpl233pr","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread/128f3zl375vb1qv93k82zhnwkpl233pr"},{"reference_url":"http://www.openwall.com/lists/oss-security/2023/12/21/2","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.openwall.com/lists/oss-security/2023/12/21/2"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-47265","reference_id":"CVE-2023-47265","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-47265"},{"reference_url":"https://github.com/advisories/GHSA-pxch-wr7m-rwxj","reference_id":"GHSA-pxch-wr7m-rwxj","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-pxch-wr7m-rwxj"}],"weaknesses":[{"cwe_id":79,"name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."}],"exploits":[],"severity_range_score":"4.0 - 6.9","exploitability":"0.5","weighted_severity":"4.9","risk_score":2.5,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-cxqa-pqca-pqgc"}