We would also like to thank Ali Al-Habsi for independently discovering and reporting this issue.
Thanks, Ash, Apache Airflow PMC On 2022/09/02 03:53:55 Jedidiah Cunningham wrote: > Description: > > In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver > session backend was susceptible to session fixation. > > Credit: > > The Apache Airflow PMC would like to thank Kai Zhao for reporting this issue. > >
