The Apache Airflow connections API failed to mask the apprise provider's config connection extra, which may contain notification-service credentials. This flaw allows users with permission to read connections to retrieve these credentials in cleartext. The issue is addressed in Apache Airflow version 3.4.0 and later, where connection credentials are treated as write-only.