Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

apache-airflow-providers-google

6 known vulnerabilities (1 critical, 3 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 1 critical, 3 high, 2 medium
Weekly downloads
1.3M
Dependents
0
Registry
PyPI

Advisories 6

  • CVE-2026-81914Medium 4.3

    Apache Airflow Google provider: Google Drive query injection via unescaped file and folder names

    Affected: fixed in 22.6.0.

  • CVE-2026-68868Medium 6.5

    Apache Airflow Google provider: google Secret Manager backend: team scope is never applied, exposing every team's Connections and Variables

    Affected: fixed in 22.3.0; fixed in 22.3.0.

  • Apache Airflow Google provider: Path traversal via GCS object names → local/SFTP filesystem (GCSToSFTPOperator +…

    Affected: fixed in 22.2.1; fixed in 22.2.1.

  • Apache Airflow Google provider: SSH host key verification disabled in ComputeEngineSSHHook (paramiko AutoAddPolicy default)

    Affected: fixed in 22.0.0; fixed in 22.0.0.

  • Apache Airflow Google Provider: Google Cloud Sql Provider Denial Of Service

    Affected: fixed in 8.10.0.

  • CVE-2023-25691Critical 9.8

    Apache Airflow Google Provider: Google Cloud Sql Provider Remote Command Execution

    Affected: fixed in 8.10.0.