Threats tagged 'ghsa-g36h-whch-ffmv'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	–	CVE-2026-111454Apache Airflow's asset API endpoints returned the IDs of Dags that are scheduled on, produce, or consume an asset Medium2026-11-09GCVE DatabaseCVE-2026-111454 Apache Airflow's asset API endpoints exposed the IDs of DAGs related to assets without verifying if the caller had permission to view those DAGs. This allowed authenticated users with asset read access to infer the existence of DAGs they were not authorized to see. Users should upgrade to Apache Airflow version 3.4.0 or later to address this issue. Report on CVE-2026-111454 Vulnerability CWE-200 #ghsa-g36h-whch-ffmv	GCVE Database	2026-11-09

Page 1 of 1