# apache-airflow-providers-apache-hive (PyPI) vulnerabilities

6 known vulnerabilities (4 critical, 2 high), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://pypi.org/project/apache-airflow-providers-apache-hive/

## Advisories (6)

### [CVE-2023-37415](https://cve.now/CVE-2023-37415): Apache Airflow Apache Hive Provider: Improper Input Validation in Hive Provider with proxy\_user

- Severity: High 8.8
- Published: Jul 13, 2023
- Affected: fixed in 6.1.2.

### [CVE-2023-35797](https://cve.now/CVE-2023-35797): Apache Airflow Hive Provider Beeline RCE with Principal

- Severity: Critical 9.8
- Published: Jul 3, 2023
- Affected: fixed in 6.1.1.

### [CVE-2023-28706](https://cve.now/CVE-2023-28706): Apache Airflow Hive Provider Beeline Remote Command Execution

- Severity: Critical 9.8
- Published: Apr 7, 2023
- Affected: fixed in 6.0.0.

### [CVE-2023-25696](https://cve.now/CVE-2023-25696): Apache Airflow Hive Provider Beeline RCE

- Severity: Critical 9.8
- Published: Feb 24, 2023
- Affected: fixed in 5.1.3.

### [CVE-2022-46421](https://cve.now/CVE-2022-46421): Apache Airflow Hive Provider: Hive Provider RCE vulnerability with hive\_cli\_params

- Severity: Critical 9.8
- Published: Dec 20, 2022
- Affected: fixed in 5.0.0.

### [CVE-2022-41131](https://cve.now/CVE-2022-41131): Apache Airflow Hive Provider vulnerability (command injection via hive\_cli connection)

- Severity: High 7.8
- Published: Nov 22, 2022
- Affected: fixed in 4.1.0.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/pypi/apache-airflow-providers-apache-hive
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.