Apache Airflow Providers Mysql

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-27018 PyPI MEDIUM PATCH This Month

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow MySQL Provider. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Apache SQLi Apache Airflow Providers Mysql

NVD GitHub

CVSS 3.1

6.3

EPSS

0.3%

CVE-2023-22884 PyPI CRITICAL PATCH Act Now

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Apache Command Injection Airflow Apache Airflow Providers Mysql

NVD GitHub

CVSS 3.1

9.8

EPSS

11.1%

CVE-2025-27018 PyPI

EPSS 0% CVSS 6.3

MEDIUM PATCH This Month

Apache SQLi Apache Airflow Providers Mysql

NVD GitHub

CVE-2023-22884 PyPI

EPSS 11% CVSS 9.8

CRITICAL PATCH Act Now

Apache Command Injection Airflow +1

NVD GitHub