apache-airflow-providers-apache-yandex vulnerabilities

CVEs whose affected-version data names the apache-airflow-providers-apache-yandex package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-68871Medium· 6.5

1mo ago

The Yandex Lockbox secrets backend in Apache Airflow's Yandex provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed

The Yandex Lockbox secrets backend in Apache Airflow's Yandex provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with thi…

▾ Sunlitapache · apache-airflow-providers-apache-yandexEPSS 0.33%via NVD