GitHub Advisoryadvisory · PyPI

GHSA-9xpj-62mm-24h2 Apache Airflow does not return the "Cache-Control" header for dynamic content

LOW Published 2024-06-14 Modified 2025-01-21 Official page ↗
Aliases
CVE-2024-25142
Ecosystem
PyPI
Packages
apache-airflow
Severity
Low
Weaknesses
CWE-525
Reviewed
2024-06-17

Affected packages

• PyPI apache-airflow: < 2.9.2 → fixed in 2.9.2

Description

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow.  Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache Airflow: before 2.9.2. Users are recommended to upgrade to version 2.9.2, which fixes the issue.

Related

Alias · CVE (1)

  • CVE-2024-25142 Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. vulnerability

Weakness · CWE (1)

  • CWE-525 Use of Web Browser Cache Containing Sensitive Information weakness

References