Threats affecting pkg:pypi/apache-airflow-providers-teradata

Apache Airflow's Teradata provider versions before 3.7.0 embed cloud storage credentials directly into SQL statements, which are then logged in Airflow task logs and Teradata's query logs. This exposure occurs when using the S3ToTeradataOperator or AzureBlobStorageToTeradataOperator against private buckets without a configured Teradata authorization object. The credentials appear in plaintext in Airflow logs and Teradata's DBQL query logs, posing a risk of credential leakage. Upgrading to version 3.7.0 or later prevents credentials from appearing in Airflow logs but does not remove them from Teradata's logs. Users should configure a Teradata authorization object and rotate exposed credentials.