apache-airflow-providers-git vulnerabilities

CVEs whose affected-version data names the apache-airflow-providers-git package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-58065High· 8.1

2mo ago

The Apache Airflow Git provider runs its git-over-SSH operations with `StrictHostKeyChecking=no` by default, disabling SSH host-key verification

The Apache Airflow Git provider runs its git-over-SSH operations with `StrictHostKeyChecking=no` by default, disabling SSH host-key verification. An attacker who can intercept the network path between an Airflow worker and the Git server…

▾ Twilightapache · apache-airflow-providers-gitEPSS 0.74%via NVD