GitHub user potiuk added a comment to the discussion: Vulnerable version of redoc package
Yes - this is public information - redoc has this vulnerabily, Do you think airlfow is vulnerable and have a reproduction scenario? Then follow the security policy https://github.com/apache/airflow/security/policy and report it - including the scenario where it can be used to make harm. We would love to see such report - can you help with it plese @mhv-trackunit since you are interested in it? or maybe your company could pay security reserchers to investigate it? We would love to be able to get more insight GitHub link: https://github.com/apache/airflow/discussions/46896#discussioncomment-12256276 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected]
