Apache Airflow Google Provider Improper Input Validation vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-25692 · ADVISORY
• apache/airflow#29499 · WEB
• apache/airflow · PACKAGE
• lists.apache.org/thread/ks4l78l5rwdpmvfn7y7yhs179nyxtlsh · WEB
• pypi.org/project/apache-airflow-providers-google · PACKAGE
• GitHub Advisory GHSA-h8p2-8g72-qpgh · ADVISORY

apache-airflow-providers-google のその他の脆弱性

• CVE-2026-81914中 4.3Apache Airflow's Google provider built Google Drive search expressions by interpolating file and folder names directly into single-quoted st…
• CVE-2026-68868中 6.5The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections …
• CVE-2026-49297高 8.1Apache Airflow's Google provider operators `GCSToSFTPOperator` and `GCSTimeSpanFileTransformOperator` joined GCS object names returned by th…
• CVE-2026-45361高 8.1Apache Airflow providers-google's `ComputeEngineSSHHook` disables SSH host-key verification by default, exposing SSH traffic between an Airf…
• CVE-2023-25691緊急 9.8Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google Provider versions b…