Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

apache-airflow-providers-amazon

4 known vulnerabilities (1 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 high, 3 medium
Weekly downloads
855.6K
Dependents
7
Registry
PyPI

Advisories 4

  • CVE-2026-68872Medium 6.5

    Apache Airflow Amazon provider: amazon SSM / Secrets Manager backends: team-scope guard bypass resolves another team's Connection or…

    Affected: fixed in 9.34.0; fixed in 9.34.0.

  • CVE-2026-42526Medium 5.3

    Apache Airflow Amazon provider: Prevent unauthorized access to team-scoped secrets in AWS Secrets Manager and SSM Parameter Store backends

    Affected: fixed in 9.28.0; fixed in 9.28.0.

  • CVE-2026-25604Medium 5.4

    Apache Airflow AWS Auth Manager - Host Header Injection Leading to SAML Authentication Bypass

    Affected: from 8.0.0, fixed in 9.22.0; fixed in 9.22.0.

  • Apache Airflow AWS Provider: Arbitrary file read via AWS provider

    Affected: fixed in 7.2.1.