Skip to main content

Vendor/product archive

apache / apache-airflow-providers-google CVEs

Beta · best-effort

4 CVEs tagged to apache / apache-airflow-providers-google1 Critical, 3 High, 0 Medium, 0 Low, 0 Unrated.

CVE-2026-49297

Published Jul 6, 2026

Apache Airflow's Google provider operators `GCSToSFTPOperator` and `GCSTimeSpanFileTransformOperator` joined GCS object names returned by the bucket listing API directly to a dest…

CVSS 8.1 · High
evidence mentions
3
Buzz score
29.9
Public PoC observed
Vendor/product tagsBeta · best-effort

CVE-2026-45361

Published May 25, 2026

Apache Airflow providers-google's `ComputeEngineSSHHook` disables SSH host-key verification by default, exposing SSH traffic between an Airflow worker and a Compute Engine VM to i…

CVSS 8.1 · High
evidence mentions
3
Buzz score
25.4
Vendor/product tagsBeta · best-effort
Showing 1-4 of 4 CVEsPage 1 of 1