| Package | Affected versions | Patched versions |
|---|---|---|
| apache-airflow | < 1.10.12 | 1.10.12 |
| airflow | ≥ 2.0.0, < 2.0.2< 1.10.15 | 2.0.21.10.15 |
In Apache Airflow < 1.10.12, the origin parameter passed to some of the endpoints like /trigger and was vulnerable to a XSS exploit.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free