← All credits

Mayank Jangid (OpenSec)

2 vulnerability records and advisories credit this contributor.

CVE-2026-82311
Apache Airflow FAB provider: FAB password reset never invalidates sessions: string/int _user_id comparison is always false
CVE-2026-82310
Apache Airflow FAB provider: FAB auth manager: deactivated users retain and renew Core API JWT access