Astronomer vulnerabilities
We track 1 vulnerability in Astronomer products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 26, 2025.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Astronomer vulnerabilities
- 9.1 Critical severity
dag-factory: Improper Neutralization of Special Elements used in an OS Command
dag-factory is a library for Apache Airflow® to construct DAGs declaratively via configuration files. In versions 0.23.0a8 and below, a high-severity vulnerability has been identified in the cicd.yml workflow within the astronomer/dag-factory GitHub repository