apache-airflow-providers-smtp vulnerabilities
CVEs whose affected-version data names the apache-airflow-providers-smtp package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-41016Medium· 5.9apache-airflow-providers-smtp: No certificate validation on SMTP STARTTLS connections in SMTP provider
apache-airflow-providers-smtp: No certificate validation on SMTP STARTTLS connections in SMTP provider
▾ Sunlitapache-airflow-providers-smtp · apache-airflow-providers-smtpEPSS 0.27%via OSV
CVE-2023-39441Medium· 5.9Apache Airflow missing Certificate Validation
Apache Airflow missing Certificate Validation
▾ Sunlitapache-airflow-providers-smtp · apache-airflow-providers-smtpEPSS 0.80%via OSV