Advisory Catalog

Apache Airflow exposes dict-valued var.json secrets in Rendered Templates

Apache Airflow XCom API permits unsafe deserialization through JSON string literals

Apache Airflow exception-node deserialization permits arbitrary callable execution

Apache Airflow Variables UI fails to mask sensitive values in deeply nested iterables

compliance-trestle has an URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0

Prowler: Stored XSS in HTML reports through unescaped cloud resource tags

The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's `team_name` was accepted by the backend but dropped at the internal call boundary, so every lookup resolved against the team-agnosti

tablib: Stored XSS in the HTML export via unescaped dataset title

Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests

Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`

Accelerate path traversal and denial of service via sharded checkpoint weight_map entries

The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with either backend, a caller in one

Apache Airflow Yandex Lockbox backend allows cross-team secret disclosure

Keras model loading is vulnerable to denial of service through HDF5 shape bombs

NLTK network URL validation permits SSRF to RFC 6598 shared-address-space hosts

Segv on unknown address in match_many_CHARACTER_REV

JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login

pypdf: Possible large memory usage for large /ToUnicode streams

pypdf: Possible long runtimes/large memory usage for large CID font width ranges

GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution

GitPython: git-config OPTION-name injection via =/#/whitespace bypasses name validator, enabling forged core.sshCommand/hooksPath (RCE)

GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython

GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()

GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks

GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwrite

NLTK downloader allows cross-package resource and model poisoning