CVE-2026-49297
Published Jul 6, 2026Apache Airflow's Google provider operators `GCSToSFTPOperator` and `GCSTimeSpanFileTransformOperator` joined GCS object names returned by the bucket listing API directly to a dest…
- evidence mentions
- 3
- Buzz score
- 29.9