Threats tagged 'ghsa-f43c-9rwr-7mfg'

Apache Airflow versions with the non-default [core] test_connection setting enabled have a vulnerability where asynchronous connection tests improperly handle permissions. Specifically, users with create permission but without edit permission can overwrite existing connections if the test completes and commits the connection under an existing ID. This issue is fixed in Apache Airflow 3.4.0 and later.