Apache Airflow Hive Provider Improper Input Validation vulnerability

CRÍTICO 9.8CVE-2023-25696 · GHSA-9mwf-mw74-9cv5 · PYSEC-2026-272 · Published 24/02/2023 · updated 17/06/2026

Em resumo

CVE-2023-25696 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta apache-airflow-providers-apache-hive, apache-airflow-providers-apache-hive (apache).
Chance de exploração nos próximos 30 dias (EPSS): 2.0%, maior que 80.6% das vulnerabilidades.
Correção: atualize para 5.1.3 ou posterior.

Package	Affected versions	Patched versions
apache-airflow-providers-apache-hive PyPI	`< 5.1.3`	`5.1.3`
apache-airflow-providers-apache-hive apache	`< 5.1.3`	`5.1.3`

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3.

NVD description

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

PyPI

< 5.1.3

5.1.3

< 5.1.3

5.1.3

Description

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3.

NVD description

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3.

Mais vulnerabilidades de apache-airflow-providers-apache-hive

Ver tudo →