Apache Airflow Providers Fab

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-45033 PyPI HIGH PATCH This Month

Insufficient Session Expiration vulnerability in Apache Airflow Fab Provider.5.2. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Apache Apache Airflow Providers Fab

NVD GitHub

CVSS 3.1

8.1

EPSS

0.7%

CVE-2024-42447 PyPI CRITICAL PATCH Act Now

Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB.2.1 (when used with Apache Airflow 2.9.3) and FAB 1.2.0 for all Airflow versions. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Apache Information Disclosure Apache Airflow Providers Fab

NVD GitHub

CVSS 3.1

9.8

EPSS

0.9%

CVE-2024-45033 PyPI

EPSS 1% CVSS 8.1

HIGH PATCH This Month

Information Disclosure Apache Apache Airflow Providers Fab

NVD GitHub

CVE-2024-42447 PyPI

EPSS 1% CVSS 9.8

CRITICAL PATCH Act Now

Apache Information Disclosure Apache Airflow Providers Fab

NVD GitHub