CVE-2024-32077

Publication date

2024-05-14 10:43:20

Family

apache

State

PUBLISHED

Description

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.  Users are recommended to upgrade to version 2.9.1, which fixes this issue.