Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2026-46745 · ADVISORY
• apache/airflow#66417 · WEB
• apache/airflow commit 3f7756b · WEB
• apache/airflow · PACKAGE
• lists.apache.org/thread/dvfy0bs181xwsrjrd3y5c55ztbzm8yhh · WEB
• openwall.com/lists/oss-security/2026/05/24/10 · WEB
• pypi.org/project/apache-airflow-providers-fab · PACKAGE
• GitHub Advisory GHSA-g283-w6fp-c4fc · ADVISORY

Lỗ hổng khác của apache-airflow-providers-fab

• CVE-2024-45033CAO 8.1Insufficient Session Expiration vulnerability in Apache Airflow Fab Provider. This issue affects Apache Airflow Fab Provider: before 1.5.2.…
• CVE-2024-42447NGHIÊM TRỌNG 9.8Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB. This issue affects Apache Airflow Providers FAB: 1.2.1 (when…