airflow-diagrams vulnerabilities

CVEs whose affected-version data names the airflow-diagrams package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-28423Critical· 9.8

2y ago

Airflow-Diagrams v2.1.0 was discovered to contain an arbitrary file upload vulnerability in the unsafe_load function at cli.py. This vuln…

Airflow-Diagrams v2.1.0 was discovered to contain an arbitrary file upload vulnerability in the unsafe_load function at cli.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted YML file.

▾ Midnightairflow-diagrams · airflow-diagramsEPSS 0.78%via OSV