apache-airflow-providers-apache-kafka vulnerabilities

CVEs whose affected-version data names the apache-airflow-providers-apache-kafka package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-86792High· 8.8

1w ago

Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's `extra` field into Python callables via `import_string`, with no allowlist, and hand them to the confluent-kafka …

Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's `extra` field into Python callables via `import_string`, with no allowlist, and hand them to the confluent-kafka …

▾ Twilightapache · apache-airflow-providers-apache-kafkaEPSS 1.2%via NVD