← All credits
Jarek Potiuk (@potiuk)
3 vulnerability records and advisories credit this contributor.
CVE-2026-45426
Apache Airflow: Log server JWT authorization bypass via Python lstrip() character stripping allows cross-Dag log access
CVE-2026-45192
Apache Airflow: Incomplete Redaction of Sensitive Fields in Connection Extra API Response
CVE-2026-49487
Apache Airflow: Task-instance API exposes secrets in deferred trigger kwargs