Security Advisory

CVE-2024-32077

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-05-14 10:43:20
Last updated 2025-03-27 19:28:00
Assigner apache
State PUBLISHED

Description

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.  Users are recommended to upgrade to version 2.9.1, which fixes this issue.