| Package | Affected versions | Patched versions |
|---|---|---|
| apache-airflow | < 1.9.0 | 1.9.0 |
| airflow | ≤ 1.8.2 |
In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free