GitHub Advisoryadvisory · PyPI

GHSA-h8p2-8g72-qpgh Apache Airflow Google Provider Improper Input Validation vulnerability

HIGH Published 2023-02-24 Modified 2023-03-06 Official page ↗
Aliases
CVE-2023-25692
Ecosystem
PyPI
Packages
apache-airflow-providers-google
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-20
Reviewed
2023-02-24

Affected packages

• PyPI apache-airflow-providers-google: < 8.10.0 → fixed in 8.10.0

Description

Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google Provider versions before 8.10.0.

Related

Alias · CVE (1)

  • CVE-2023-25692 Improper Input Validation vulnerability in the Apache Airflow Google Provider. vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References