Advisories · Technology
Apache Software Foundation Apache Airflow SSH provider.
Every CVE that names Apache Software Foundation Apache Airflow SSH provider among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote host
- Apache Software Foundation Apache Airflow SSH provider
- Command injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default
- Apache Software Foundation Apache Airflow SSH provider
- Apache Software Foundation Apache Airflow SFTP provider
- CWE-322