Description: In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.
Credit: The Apache Airflow PMC would like to thank L3yx of Syclover Security Team for reporting this issue. References: https://github.com/apache/airflow/pull/26337
