← All credits
secuholic
2 vulnerability records and advisories credit this contributor.
CVE-2026-49818
Apache Airflow Samba provider: Path traversal in GCSToSambaOperator via GCS object names
CVE-2026-50203
Apache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory allows local file write outside the destination directory via malicious server-supplied directory-entry names