Apache-airflow-providers-git vulnerabilities

1 known vulnerability in Apache-airflow-providers-git from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Apache Airflow Git provider: Key Exchange without Entity Authentication

  CVE-2026-58065Jul 13, 2026Apache

  The Apache Airflow Git provider runs its git-over-SSH operations with `StrictHostKeyChecking=no` by default, disabling SSH host-key verification. An attacker who can intercept the network path between an Airflow worker and the Git server can impersonate the se