users  

Messages by Thread

• CVE-2026-40948: Apache Airflow Keycloak Provider: OAuth Login CSRF — Missing State Parameter in Keycloak Auth Manager Jarek Potiuk
• CVE-2026-25917: Apache Airflow: API extra-links triggers XCom deserialization/class instantiation (Airflow 3.1.5) Rahul Vats
• CVE-2026-32228: Apache Airflow: Users with asset materialization permisssions could trigger Dags they had no access to Rahul Vats
• CVE-2026-30898: Apache Airflow: Bad example of BashOperator shell injection via dag_run.conf Rahul Vats
• CVE-2026-32690: Apache Airflow: 3.x - Nested Variable Secret Values Bypass Redaction via max_depth=1 Rahul Vats
• CVE-2026-30912: Apache Airflow: Exposing stack trace in case of constraint error Rahul Vats
• CVE-2026-31987: Apache Airflow: JWT token appearing in logs Rahul Vats
• CVE-2026-25219: Apache Airlfow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access Jarek Potiuk
• CVE-2025-54550: Apache Airflow: RCE by race condition in example_xcom dag Jarek Potiuk
• [ANNOUNCE] Apache Airflow Providers prepared on 2026-04-12 are released Jarek Potiuk
• CVE-2026-33858: Apache Airflow: Unsafe Deserialization via Legacy Serialization Keys (__type/__var) Bypass in XCom API Rahul Vats
• CVE-2025-66236: Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI Rahul Vats
• [ANNOUNCE] Apache Airflow Python Client 3.2.0 Released Rahul Vats
• [ANNOUNCE] Apache Airflow Providers prepared on 2026-04-08 are released Jarek Potiuk
• 🤠 Meetup in Austin TX! Warming up for Airflow Summit 2026 Teyza Ponce
• CVE-2025-57735: Apache Airflow: Airflow Logout Not Invalidating JWT Rahul Vats
• CVE-2026-34538: Apache Airflow: Authorization bypass in DagRun wait endpoint (XCom exposure) Rahul Vats
• [ANNOUNCE] Apache Airflow 3.2.0 Released Rahul Vats
  • Re: [ANNOUNCE] Apache Airflow 3.2.0 Released Jarek Potiuk
• CVE-2026-32794: Apache Airflow Provider for Databricks: TLS Certificate Verification Disabled in Databricks Provider K8s Token Exchange Jens Scheffler
• [ANNOUNCE] Apache Airflow Python Client 3.1.8 Released Rahul Vats
• PSA: LiteLLM Supply Chain Compromise (2026-03-24) Jed Cunningham
• [ANNOUNCE] Apache Airflow Helm Chart version 1.20.0 Released Jens Scheffler
• Airflow Summit 2026: Super Early Bird is almost gone! Teyza Ponce
• [ANNOUNCE] Apache Airflow Registry — find the right operator, hook, or sensor in seconds Kaxil Naik
• [ANNOUNCE] Apache Airflow CTl 0.1.3 from 0.1.3rc2 released Buğra Öztürk
• CVE-2026-28563: Apache Airflow: DAG authorization bypass Rahul Vats
• CVE-2026-26929: Apache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks Metadata Rahul Vats
• CVE-2026-28779: Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications Rahul Vats
• CVE-2026-30911: Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization Rahul Vats
• [ANNOUNCE] Apache Airflow 2.11.2 Released Jarek Potiuk
• [ANNOUNCE] Apache Airflow Providers prepared on 2026-03-09 are released Beck, Vincent
• Airflow Summit 2026 - CFP closes tomorrow! Teyza Ponce
• [ANNOUNCE] Apache Airflow 3.1.8 Released Rahul Vats
  • Re: [ANNOUNCE] Apache Airflow 3.1.8 Released Kaxil Naik
  • Re: [ANNOUNCE] Apache Airflow 3.1.8 Released Jarek Potiuk
• CVE-2026-25604: Apache Airflow AWS Auth Manager - Host Header Injection Leading to SAML Authentication Bypass Jarek Potiuk
• CVE-2025-69219: Apache Airflow Providers Http: Unsafe Pickle Deserialization in apache-airflow-providers-http leading to RCE via HttpOperator Jarek Potiuk
• [ANNOUNCE] Apache Airflow Providers prepared on 2026-03-03 are released Jarek Potiuk
• [ANNOUNCE] Apache Airflow Providers prepared on 2026-02-26 are released Jarek Potiuk
• [CFP] Airflow Summit - reminder to submit your talks soon! Jarek Potiuk
• [ANNOUNCE] Airflow 2.11.1 - Python 3.12 constraints and image updated today Jarek Potiuk
• [ANNOUNCE] Apache Airflow CTl 0.1.2 from 0.1.2rc1 released Buğra Öztürk
• CVE-2025-68675: also fixed inAirflow 2.11.1: Various providers might leaks proxy credentials in task logs (KiotaRequestAdapterHook/PowerBIHook) External Jarek Potiuk
• Disclosure of secrets to UI via kwargs [CVE-2025-65995] also fixed in 2.11.1 Jarek Potiuk
  • Re: Disclosure of secrets to UI via kwargs [CVE-2025-65995] also fixed in 2.11.1 Sandeep S
• Fwd: CVE-2025-27555: Apache Airflow: Connection Secrets not masked in UI when Connection are added via Airflow cli Jarek Potiuk
• CVE-2024-56373: Apache Airflow: SSTI to Code Execution in Airflow through Shared DB Information Jarek Potiuk
• Change applied to container images 2.11.1 and constraints for 2.11.1 Jarek Potiuk
• [ANNOUNCE] Apache Airflow 2.11.1 and Fab provider 1.5.4 Released Jarek Potiuk
  • Re: [ANNOUNCE] Apache Airflow 2.11.1 and Fab provider 1.5.4 Released Kaxil Naik
  • Re: [ANNOUNCE] Apache Airflow 2.11.1 and Fab provider 1.5.4 Released Amogh Desai
  • Re: [ANNOUNCE] Apache Airflow 2.11.1 and Fab provider 1.5.4 Released Michał Modras via users
• [ANNOUNCE] Apache Airflow Helm Chart version 1.19.0 Released Jed Cunningham
  • Re: [ANNOUNCE] Apache Airflow Helm Chart version 1.19.0 Released Amogh Desai
  • Re: [ANNOUNCE] Apache Airflow Helm Chart version 1.19.0 Released Jarek Potiuk
  • Re: [ANNOUNCE] Apache Airflow Helm Chart version 1.19.0 Released Shahar Epstein
• CVE-2026-24098: Apache Airflow: Assigning single DAG permission leaked all DAGs Import Errors Ephraim Anierobi
• CVE-2026-22922: Apache Airflow: Airflow externalLogUrl Permission Bypass Ephraim Anierobi
• Airflow Summit 2026 - Venue, recordings and discounts 👀 Teyza Ponce
• [ANNOUNCE] Apache Airflow 3.1.7 Released Ephraim Anierobi
• [ANNOUNCE] Apache Airflow Providers prepared on 2026-01-27 are released Beck, Vincent
• [ANNOUNCE] Apache Airflow Python Client 3.1.6 Released Ephraim Anierobi
  • Re: [ANNOUNCE] Apache Airflow Python Client 3.1.6 Released Kaxil Naik
• [ANNOUNCE] Apache Airflow Providers prepared on 2026-01-17 are released Jens Scheffler
• CVE-2025-68675: Apache Airflow: proxy credentials for various providers might leak in task logs Ephraim Anierobi
• CVE-2025-68438: Apache Airflow: Secrets in rendered templates could contain parts of sensitive values when truncated Ephraim Anierobi
• [ANNOUNCE] Apache Airflow 3.1.6 Released Ephraim Anierobi
• 🐣 Airflow Summit 2026: Super early-bird tickets & Call for proposals are live! Teyza Ponce
• Re: [ANNOUNCE] Apache Airflow Providers prepared on 2025-12-30 are released Shahar Epstein
  • Re: [ANNOUNCE] Apache Airflow Providers prepared on 2025-12-30 are released Jens Scheffler
  • Re: [ANNOUNCE] Apache Airflow Providers prepared on 2025-12-30 are released Jarek Potiuk
• CVE-2025-67895: Apache Airflow Providers Edge3: Edge3 Worker RPC RCE on Airflow 2 Jarek Potiuk
• [ANNOUNCE] Apache Airflow 3.1.5 Released Ephraim Anierobi
• CVE-2025-65995: Apache Airflow: Disclosure of secrets to UI via kwargs Ephraim Anierobi
• CVE-2025-66388: Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI Ephraim Anierobi
• 💌 Airflow Summit 2026- CFP is open! Teyza Ponce
  • Re: 💌 Airflow Summit 2026- CFP is open! Amogh Desai
• [ANNOUNCE] Apache Airflow 3.1.4 Released Ephraim Anierobi
  • Re: [ANNOUNCE] Apache Airflow 3.1.4 Released Shahar Epstein
  • Re: [ANNOUNCE] Apache Airflow 3.1.4 Released Jarek Potiuk
  • Re: [ANNOUNCE] Apache Airflow 3.1.4 Released Amogh Desai
• [ANNOUNCE] Apache Airflow Python Client 3.1.3 Released Ephraim Anierobi
• Airflow Summit 2025 - First recordings available Teyza Ponce
  • Re: Airflow Summit 2025 - First recordings available Jarek Potiuk
  • Re: Airflow Summit 2025 - First recordings available Amogh Desai
• [ANNOUNCE] Apache Airflow Providers prepared on 2025-11-18 are released Jarek Potiuk
• [ANNOUNCE] Apache Airflow Providers prepared on 2025-11-14 are released Jarek Potiuk
• [ANNOUNCE] Apache Airflow 3.1.3 Released Ephraim Anierobi
  • Re: [ANNOUNCE] Apache Airflow 3.1.3 Released Jarek Potiuk
  • Re: [ANNOUNCE] Apache Airflow 3.1.3 Released Amogh Desai
• [ANNOUNCE] Apache Airflow CTl 0.1.0 from 0.1.0rc2 released Jarek Potiuk
• [ANNOUNCE] Apache Airflow Providers prepared on 2025-11-03 are released Jarek Potiuk
• [ANNOUNCE] Apache Airflow 3.1.2 & Task SDK 1.1.2 Released Ephraim Anierobi
  • Re: [ANNOUNCE] Apache Airflow 3.1.2 & Task SDK 1.1.2 Released Buğra Öztürk
  • Re: [ANNOUNCE] Apache Airflow 3.1.2 & Task SDK 1.1.2 Released Jarek Potiuk
• CVE-2025-62503: Apache Airflow: Privilege boundary bypass in bulk APIs (create action can upsert existing Pools/Connections/Variables) Kaxil Naik
  • CVE-2025-62503: Apache Airflow: Privilege boundary bypass in bulk APIs (create action can upsert existing Pools/Connections/Variables) Kaxil Naik
• CVE-2025-62402: Apache Airflow: Airflow 3 API: /api/v2/dagReports executes DAG Python in API Kaxil Naik
  • CVE-2025-62402: Apache Airflow: Airflow 3 API: /api/v2/dagReports executes DAG Python in API Kaxil Naik
• CVE-2025-54941: Apache Airflow: Command injection in "example_dag_decorator" Kaxil Naik
  • CVE-2025-54941: Apache Airflow: Command injection in "example_dag_decorator" Kaxil Naik
• [ANNOUNCE] Apache Airflow Python Client 3.1.0 Released Kaxil Naik
  • Re: [ANNOUNCE] Apache Airflow Python Client 3.1.0 Released Buğra Öztürk
  • Re: [ANNOUNCE] Apache Airflow Python Client 3.1.0 Released Jarek Potiuk
  • Re: [ANNOUNCE] Apache Airflow Python Client 3.1.0 Released Amogh Desai
• Is our CSP policy/yoytube video embedding "proper" now? Jarek Potiuk
  • Re: Is our CSP policy/yoytube video embedding "proper" now? Jarek Potiuk
• [ANNOUNCE] Apache Airflow 3.1.1 & Task SDK 1.1.1 Released Kaxil Naik
  • Re: [ANNOUNCE] Apache Airflow 3.1.1 & Task SDK 1.1.1 Released Amogh Desai
  • Re: [ANNOUNCE] Apache Airflow 3.1.1 & Task SDK 1.1.1 Released Jarek Potiuk
  • RE: [ANNOUNCE] Apache Airflow 3.1.1 & Task SDK 1.1.1 Released Eugene Anisimov
• [ANNOUNCE] Apache Airflow Providers prepared on October 22, 2025 are released Elad Kalif
• [ANNOUNCE] Apache Airflow Providers prepared on October 04, 2025 are released Elad Kalif
• [ANNOUNCE] Apache Airflow Providers prepared on October 01, 2025 are released Elad Kalif
• Re: Inquiry Regarding Support, Billing, and Licensing for Apache Kafka & Airflow Docker Deployments Jarek Potiuk
• 🎟️ Access included: Join Airflow Summit Online Reconnect Teyza Ponce
• [ANNOUNCE] Apache Airflow Providers prepared on September 28, 2025 are released Elad Kalif
• ⏳ Only 2 weeks left: Join Airflow Summit 2025 in Seattle 🎙️ Teyza Ponce
• [ANNOUNCE] Apache Airflow Providers prepared on September 25, 2025 are released Elad Kalif
• CVE-2025-54831: Apache Airflow: Connection sensitive details exposed to users with READ permissions Kaxil Naik
  • CVE-2025-54831: Apache Airflow: Connection sensitive details exposed to users with READ permissions Kaxil Naik
• 🎙️Airflow Summit 2025: 50 use cases on how to use Apache Airflow 👀 Teyza Ponce
• [ANNOUNCE] Apache Airflow Providers prepared on September 18, 2025 are released Elad Kalif
• [ANNOUNCE] Apache Airflow Providers prepared on September 05, 2025 are released Elad Kalif
• 👀 We are less than a month away from Airflow Summit 2025, get your ticket now! Teyza Ponce
• [ANNOUNCE] Changed cc: behaviour for our lists Jarek Potiuk
  • Re: [ANNOUNCE] Changed cc: behaviour for our lists Jarek Potiuk
• Airflow Summit 2025 - Workshops and online event! Teyza Ponce
• [ANNOUNCE] Apache Airflow 3.0.6 & Task SDK 1.0.6 Released Kaxil Naik
• [ANNOUNCE] Apache Airflow 3.0.5 Released Kaxil Naik
  • Re: [ANNOUNCE] Apache Airflow 3.0.5 Released Amogh Desai
• [ANNOUNCE] Apache Airflow Providers prepared on August 12, 2025 are released Elad Kalif
• [ANNOUNCE] Apache Airflow Providers prepared on August 07, 2025 are released Elad Kalif
• [ANNOUNCE] Apache Airflow 3.0.4 Released Ash Berlin-Taylor
• Airflow Summit Workshops Are Live 🎟️ Secure Your Spot! Teyza Ponce
• [ANNOUNCE] Apache Airflow Providers prepared on July 29, 2025 are released Elad Kalif
• 👀 The wait is over: Full program for Airflow Summit 2025 is now live! ➕ Special Discounts Teyza Ponce
• [ANNOUNCE] Apache Airflow 3.0.3 reference images rebuilt Jarek Potiuk
• [ANNOUNCE] Apache Airflow Providers prepared on July 17, 2025 are released Elad Kalif
  • Re: [ANNOUNCE] Apache Airflow Providers prepared on July 17, 2025 are released Buğra Öztürk
• Hiring a new HR airflowCe0
• [ANNOUNCE] Apache Airflow 3.0.3 Released Kaxil Naik
  • Re: [ANNOUNCE] Apache Airflow 3.0.3 Released Sergei Veras
  • Re: [ANNOUNCE] Apache Airflow 3.0.3 Released Amogh Desai
• [ANNOUNCE] Apache Airflow Helm Chart version 1.18.0 Released Jed Cunningham
  • Re: [ANNOUNCE] Apache Airflow Helm Chart version 1.18.0 Released Jarek Potiuk
  • Re: [ANNOUNCE] Apache Airflow Helm Chart version 1.18.0 Released Buğra Öztürk
  • Re: [ANNOUNCE] Apache Airflow Helm Chart version 1.18.0 Released Amogh Desai
• [ANNOUNCE] Apache Airflow Providers prepared on July 08, 2025 are released Elad Kalif
• [ANNOUNCE] Apache Airflow Providers prepared on July 03, 2025 are released Elad Kalif
• Apache TinkerPop Provider demo Ahmad Farhan
  • Re: Apache TinkerPop Provider demo Stephen Mallette
  • Re: Apache TinkerPop Provider demo Stephen Mallette
• 🎟️ Check out the full program- Early Bird ends in 1 week! Teyza Ponce
• [ANNOUNCE] Apache Airflow Providers prepared on June 20, 2025 are released Elad Kalif
• CVE-2025-50213: Apache Airflow Providers Snowflake: Potential SQL injection in CopyFromExternalStageToSnowflakeOperator Elad Kalif
• [ANNOUNCE] Apache Airlfow 3.0.2 reference images rebuilt Jarek Potiuk
• [ANNOUNCE] Apache Airflow Helm Chart version 1.17.0 Released Jed Cunningham
  • Re: [ANNOUNCE] Apache Airflow Helm Chart version 1.17.0 Released Amogh Desai
• [ANNOUNCE] Apache Airflow Providers prepared on June 15, 2025 are released Elad Kalif
• [ANNOUNCE] Apache Airflow Python Client 3.0.2 Released Kaxil Naik
• [ANNOUNCE] Apache Airflow 3.0.2 Released Kaxil Naik
  • Re: [ANNOUNCE] Apache Airflow 3.0.2 Released Amogh Desai
• [ANNOUNCE] Apache Airflow Providers prepared on June 03, 2025 are released Jarek Potiuk
  • Re: [ANNOUNCE] Apache Airflow Providers prepared on June 03, 2025 are released Kaxil Naik
  • Re: [ANNOUNCE] Apache Airflow Providers prepared on June 03, 2025 are released Amogh Desai
  • Re: [ANNOUNCE] Apache Airflow Providers prepared on June 03, 2025 are released Jarek Potiuk
  • Re: [ANNOUNCE] Apache Airflow Providers prepared on June 03, 2025 are released Sandeep S
• [ANNOUNCE] Apache Airflow Python Client 3.0.0 Released Kaxil Naik
  • Re: [ANNOUNCE] Apache Airflow Python Client 3.0.0 Released Buğra Öztürk
• 🐦 Last CFP Call: Join us in Seattle for Airflow Summit 2025 Teyza Ponce
• [ANNOUNCE] Apache Airflow Providers prepared on May 20, 2025 are released Elad Kalif
• [ANNOUNCE] Apache Airflow 2.11.0 Released Kaxil Naik
  • Re: [ANNOUNCE] Apache Airflow 2.11.0 Released Amogh Desai
• [ANNOUNCE] Apache Airflow Providers prepared on May 14, 2025 are released Elad Kalif
• [ANNOUNCE] Apache Airflow 3.0.1 Released Kaxil Naik
  • Re: [ANNOUNCE] Apache Airflow 3.0.1 Released Amogh Desai
  • Re: [ANNOUNCE] Apache Airflow 3.0.1 Released Jarek Potiuk
• [ANNOUNCE] Apache Airflow Providers prepared on May 08, 2025 are released Elad Kalif
• [ANNOUNCE] Apache Airflow Providers prepared on May 05, 2025 are released Elad Kalif
• [ANNOUNCE] Apache Airflow Providers prepared on April 28, 2025 are released Elad Kalif
• SUBSCRIBE Whiteford, Gary R
  • SUBSCRIBE Whiteford, Gary R
• [no subject] Whiteford, Gary R
• [ANNOUNCE] Apache Airflow Providers prepared on April 24, 2025 are released Elad Kalif
• [ANNOUNCE] Apache Airflow 3.0.0 Released Kaxil Naik
• [ANNOUNCE] Apache Airflow Providers prepared on April 20, 2025 are released Elad Kalif
• [ANNOUNCE] Apache Airflow Providers prepared on April 16, 2025 are released Elad Kalif
• Airflow Summit 2025 - 2nd round of CFP is open! Teyza Ponce
• [ANNOUNCE] Apache Airflow Providers prepared on April 10, 2025 are released Elad Kalif
• [ANNOUNCE] Apache Airflow Providers prepared on April 06, 2025 are released Elad Kalif
• [ANNOUNCE] Apache Airflow Providers prepared on March 26, 2025 are released Elad Kalif
• [ANNOUNCE] Apache Airflow Helm Chart version 1.16.0 Released Jed Cunningham
  • Re: [ANNOUNCE] Apache Airflow Helm Chart version 1.16.0 Released Jarek Potiuk
  • Re: [ANNOUNCE] Apache Airflow Helm Chart version 1.16.0 Released Amogh Desai
• CVE-2025-30473: Apache Airflow Common SQL Provider: Remote Code Execution via Sql Injection Elad Kalif
• Check out the confirmed keynote speakers for Airflow Summit 2025! Teyza Ponce
• CVE-2025-27018: Apache Airflow MySQL Provider: SQL injection in MySQL provider core function Elad Kalif
• [ANNOUNCE] Apache Airflow Providers prepared on March 09, 2025 are released Elad Kalif

• Earlier messages