Threats tagged 'ghsa-423g-74fv-rrcc'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-101031The example_dag_decorator example Dag shipped with Apache Airflow validated an IP address fetched over HTTP with High2026-11-09GCVE DatabaseCVE-2026-101031 The example_dag_decorator example DAG in Apache Airflow improperly validates an IP address fetched over HTTP, allowing shell command injection via crafted IPv6 zone identifiers. This vulnerability is an incomplete fix of CVE-2025-54941. Users should upgrade to Apache Airflow 3.4.0 or later or disable example DAGs in production. Report on CVE-2026-101031 Vulnerability CWE-78 #ghsa-423g-74fv-rrcc	GCVE Database	2026-11-09

Page 1 of 1