| Package | Affected versions | Patched versions |
|---|---|---|
| apache-airflow | ≥ 2.3.0, < 2.4.0b1≥ 2.3.0, < 2.4.0rc1 | 2.4.0b12.4.0rc1 |
| airflow | ≥ 2.3.0, ≤ 2.3.4 |
In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's /confirm endpoint.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free