apache-airflow-providers-ssh vulnerabilities

CVEs whose affected-version data names the apache-airflow-providers-ssh package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-94134None

yesterday

Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default

The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless `host_key` is configured or `no_host_key_check` is explicitly set to false, it accepts any server key. This affects SSH and SFTP connections that …

▾ SunlitApache Software Foundation · apache-airflow-providers-sshvia CVEORG