Apache Airflow providers-google's `ComputeEngineSSHHook` disables SSH host-key verification by default

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2026-45361 · ADVISORY
• apache/airflow#66746 · WEB
• apache/airflow commit 120dbed · WEB
• apache/airflow · PACKAGE
• pypa/advisory-database · WEB
• lists.apache.org/thread/3lpj7ppwxp7jtp81rnxk75xvln7qd7h2 · WEB
• openwall.com/lists/oss-security/2026/05/24/9 · WEB
• lists.apache.org/thread/3lpj7ppwxp7jtp81rnxk75xvln7qd7h2
• GitHub Advisory GHSA-g9v5-gjwf-9rwx · ADVISORY

Lỗ hổng khác của apache-airflow-providers-google

• CVE-2026-81914TRUNG BÌNH 4.3Apache Airflow's Google provider built Google Drive search expressions by interpolating file and folder names directly into single-quoted st…
• CVE-2026-68868TRUNG BÌNH 6.5The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections …
• CVE-2026-49297CAO 8.1Apache Airflow's Google provider operators `GCSToSFTPOperator` and `GCSTimeSpanFileTransformOperator` joined GCS object names returned by th…
• CVE-2023-25692CAO 7.5Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google Provider versions b…
• CVE-2023-25691NGHIÊM TRỌNG 9.8Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google Provider versions b…