GitHub user potiuk added a comment to the discussion: Req: fastapi, starlette version up
Unfortunately not. Starlette is limited with fastapi version we are using in 3.1 version - and upgrading fastapi to later version required significant changes that are difficult and risky to backport, so you will have to wait for 3.2* to use later starlette version. However it's likely we are not impacted by it as this issue is only on File serving endpoints that we do not have in Airflow, and quite certainly such endpoints are not exposed to non-authenticated users. While this is not something that we can say with 100% certainty, I would not loose your sleep on that CVE. GitHub link: https://github.com/apache/airflow/discussions/61233#discussioncomment-15649150 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected]
