GitHub user Huthesh edited a discussion: Vulnerability in 
Flask-AppBuilder<=4.5.0

Hi Team,

All latest versions of airflow uses Flask-AppBuilder=4.5.0. As per 
https://github.com/advisories/GHSA-fw5r-6m3x-rh7p all version below 4.5.1 is 
impacted due to "_Flask-AppBuilder's login form allows browser to cache 
sensitive fields_". Is there plan to upgrade the  Flask-AppBuilder's version. 

if there is a plan when is it expected to be released? Is there a work around ?

GitHub link: https://github.com/apache/airflow/discussions/44980

----
This is an automatically sent email for [email protected].
To unsubscribe, please send an email to: [email protected]

Reply via email to