airflow_cncf_kubernetes vulnerabilities
1 known vulnerability in airflow_cncf_kubernetes from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest first
- 7.2 High severity
Apache Airflow CNCF Kubernetes Provider: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow connection. In order to exploit this weakness, a user would already need elevated permissions (Op or Admin) to