~/products/apache_software_foundation/apache_airflow_amazon_provider

pipeline liveDigest Docs

Apache Software Foundation Apache Airflow Amazon Provider vulnerabilities

1 known vulnerability affecting apache_software_foundation/apache_airflow_amazon_provider.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

SortPage 1 of 1

CVE-2026-42526P4MEDIUMCVSS 5.3fixed in 9.28.02026-05-19

CVE-2026-42526 [MEDIUM] CWE-863 CVE-2026-42526: In the AWS Secrets Manager and SSM Parameter Store secrets backends of `apache-airflow-providers-ama In the AWS Secrets Manager and SSM Parameter Store secrets backends of `apache-airflow-providers-amazon` prior to 9.28.0, the team-scoping logic could resolve a `conn_id` containing a `/` (e.g. `"my_team/conn"`) to the same path as another team's team-scoped secret when the caller had no team context. A privileged caller without team context could t