Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Apache Airflow Google Provider — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Apache Airflow Google Provider, with AI-generated Chinese analysis, references, and POCs.

Vendor: Apache Software Foundation

CVE IDTitleCVSSSeverityPublished
CVE-2026-49297 Apache Airflow Google provider: Path traversal via GCS object names → local/SFTP filesystem (GCSToSFTPOperator + GCSTimeSpanFileTransformOperator) CWE-22--2026-07-06
CVE-2026-45361 Apache Airflow Google provider: SSH host key verification disabled in ComputeEngineSSHHook (paramiko AutoAddPolicy default) CWE-322--2026-05-25
CVE-2023-25692 Apache Airflow Google Provider: Google Cloud Sql Provider Denial Of Service CWE-20 9.1 -2023-02-24
CVE-2023-25691 Apache Airflow Google Provider: Google Cloud Sql Provider Remote Command Execution CWE-20 9.1 -2023-02-24

All 4 known CVE vulnerabilities affecting Apache Airflow Google Provider with full Chinese analysis, references, and POCs where available.