Homepage

airflow-2

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the airflow-2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
GHSA-qccp-gfcp-xxvc

<2.11.2-r26
  • L
GHSA-vxq7-64xx-v4gw

<2.11.2-r26
  • L
GHSA-8988-9cw3-xx77

<2.11.2-r26
  • H
Allocation of Resources Without Limits or Throttling

<2.11.2-r26
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<2.11.2-r26
  • H
Improper Certificate Validation

<2.11.2-r26
  • L
GHSA-gh4c-6fx4-qh6g

<2.11.2-r26
  • M
Information Exposure

<2.11.2-r26
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<2.11.2-r26
  • L
GHSA-mf9v-mfxr-j63j

<2.11.2-r26
  • L
GHSA-ffc3-869f-jxw9

<2.11.2-r25
  • L
Unintended Proxy or Intermediary ('Confused Deputy')

<2.11.2-r25
  • L
Improper Authentication

<2.11.2-r25
  • L
Improper Verification of Cryptographic Signature

<2.11.2-r25
  • L
Resource Exhaustion

<2.11.2-r25
  • L
GHSA-p4g4-x82p-q773

<2.11.2-r25
  • L
GHSA-9v7f-9g4p-ffgj

<2.11.2-r25
  • L
Improper Verification of Cryptographic Signature

<2.11.2-r25
  • L
GHSA-hxm8-2xgr-2p9m

<2.11.2-r25
  • L
GHSA-fhv5-28vv-h8m8

<2.11.2-r25
  • H
Improper Handling of Exceptional Conditions

<2.11.2-r25
  • L
GHSA-w6j9-cwv2-h6wq

<2.11.2-r25
  • L
GHSA-w7vc-732c-9m39

<2.11.2-r25
  • L
GHSA-xgmm-8j9v-c9wx

<2.11.2-r25
  • L
GHSA-jq35-7prp-9v3f

<2.11.2-r25
  • L
Improper Verification of Cryptographic Signature

<2.11.2-r25
  • C
Information Exposure

<2.11.2-r25
  • L
GHSA-993g-76c3-p5m4

<2.11.2-r25
  • H
Allocation of Resources Without Limits or Throttling

<2.11.2-r25
  • M
Incorrect Behavior Order: Validate Before Canonicalize

<2.11.2-r25
  • L
Improper Cleanup on Thrown Exception

<2.11.2-r25
  • L
GHSA-2gx3-rcp4-g85q

<2.11.2-r25
  • L
GHSA-8v8h-hg4w-mvq2

<2.11.2-r24
  • L
Resource Exhaustion

<2.11.2-r24
  • L
GHSA-82r6-8w77-94w6

<2.11.2-r23
  • L
GHSA-5p39-cfhj-2xmp

<2.11.2-r23
  • L
Improper Certificate Validation

<2.11.2-r23
  • L
Allocation of Resources Without Limits or Throttling

<2.11.2-r23
  • L
Resource Exhaustion

<2.11.2-r22
  • L
GHSA-gjv8-xp57-g29c

<2.11.2-r22
  • L
Resource Exhaustion

<2.11.2-r22
  • L
Resource Exhaustion

<2.11.2-r22
  • L
GHSA-836r-79rf-4m37

<2.11.2-r22
  • L
GHSA-j934-xhv5-fg8f

<2.11.2-r22
  • L
Resource Exhaustion

<2.11.2-r22
  • L
GHSA-2wc2-fm75-p42x

<2.11.2-r22
  • L
GHSA-fgch-86x8-fv43

<2.11.2-r21
  • L
Cleartext Transmission of Sensitive Information

<2.11.2-r21
  • L
GHSA-8g6f-qw9x-4q6q

<2.11.2-r20
  • L
CVE-2026-15736

<2.11.2-r20
  • L
GHSA-2r5m-76wx-56gx

<2.11.2-r19
  • L
Deserialization of Untrusted Data

<2.11.2-r19
  • L
GHSA-5cc2-282f-jjq2

<2.11.2-r19
  • L
CVE-2026-15925

<2.11.2-r19
  • L
GHSA-vxj7-4xrp-5vr4

<2.11.2-r18
  • L
Arbitrary Code Injection

<2.11.2-r18
  • L
GHSA-v3q9-hj7j-63hq

<2.11.2-r18
  • L
Arbitrary Command Injection

<2.11.2-r18
  • L
GHSA-qr67-gv47-xwwh

<2.11.2-r17
  • L
Directory Traversal

<2.11.2-r17
  • H
Directory Traversal

<2.11.2-r17
  • L
GHSA-g794-3fmp-753h

<2.11.2-r17
  • L
GHSA-2wxc-x7rj-hg8f

<2.11.2-r17
  • L
Directory Traversal

<2.11.2-r17
  • L
Resource Exhaustion

<2.11.2-r16
  • L
Arbitrary Code Injection

<2.11.2-r16
  • L
GHSA-f2ff-p2ww-7p4p

<2.11.2-r16
  • L
GHSA-pwgv-4x5q-6m9f

<2.11.2-r16
  • L
Algorithmic Complexity

<2.11.2-r16
  • L
GHSA-prg7-hcfm-mfcr

<2.11.2-r16
  • L
GHSA-3496-9g83-7v6x

<2.11.2-r16
  • L
Inefficient Regular Expression Complexity

<2.11.2-r16
  • L
GHSA-pjwm-pj3p-43mv

<2.11.2-r12
  • L
Server-Side Request Forgery (SSRF)

<2.11.2-r12
  • L
Authentication Bypass

<2.11.2-r12
  • L
GHSA-4xpc-pv4p-pm3w

<2.11.2-r12
  • L
GHSA-j86x-fwp2-qh7v

<2.11.2-r11
  • L
Information Exposure Through Log Files

<2.11.2-r11
  • H
Directory Traversal

<2.11.2-r9
  • L
Cross-site Request Forgery (CSRF)

<2.11.2-r8
  • L
GHSA-mj87-hwqh-73pj

<2.11.2-r9
  • L
Resource Exhaustion

<2.11.2-r9
  • L
CVE-2026-1703

<2.11.2-r9
  • L
GHSA-6vgw-5pg2-w6jp

<2.11.2-r9
  • L
GHSA-v92g-xgxw-vvmm

<2.11.2-r9
  • L
GHSA-p423-j2cm-9vmq

<2.11.2-r8
  • C
Out-of-Bounds

<2.11.2-r8
  • L
GHSA-pjjw-68hj-v9mw

<2.11.2-r8
  • L
GHSA-jj8c-mmj3-mmgv

<2.11.2-r8
  • L
GHSA-69x8-hrgq-fjj8

<2.11.2-r7
  • L
GHSA-53mr-6c8q-9789

<2.11.2-r7
  • L
Improper Authentication

<2.11.2-r7
  • L
GHSA-jjhc-v7c2-5hh6

<2.11.2-r7
  • H
Incorrect Authorization

<2.11.2-r7
  • L
GHSA-m5qp-6w8w-w647

<2.11.2-r5
  • L
Resource Exhaustion

<2.11.2-r5
  • M
HTTP Response Splitting

<2.11.2-r5
  • L
GHSA-mwh4-6h8g-pg8w

<2.11.2-r5
  • L
GHSA-hcc4-c3v8-rx92

<2.11.2-r5
  • M
Information Exposure Through Caching

<2.11.2-r5
  • H
Directory Traversal

<2.11.2-r5
  • L
GHSA-f9vj-2wh5-fj8j

<2.11.1-r0
  • H
Information Exposure

<2.11.2-r5
  • L
CVE-2024-34069

<2.11.1-r0
  • L
Allocation of Resources Without Limits or Throttling

<2.11.2-r5
  • M
Allocation of Resources Without Limits or Throttling

<2.11.2-r5
  • L
GHSA-q34m-jh98-gwm2

<2.11.1-r0
  • H
Out-of-bounds Write

<2.11.1-r0
  • L
GHSA-hrfv-mqp8-q5rw

<2.11.1-r0
  • L
GHSA-w2fm-2cpv-w7v5

<2.11.2-r5
  • M
Directory Traversal

<2.11.1-r0
  • L
GHSA-mrfv-m5wm-5w6w

<2.11.1-r0
  • L
GHSA-2g68-c3qc-8985

<2.11.1-r0
  • L
GHSA-63hf-3vf5-4wqf

<2.11.2-r5
  • L
GHSA-wj6h-64fc-37mp

<2.11.2-r5
  • L
GHSA-966j-vmvw-g2g9

<2.11.2-r5
  • M
HTTP Response Splitting

<2.11.2-r5
  • L
GHSA-p998-jp59-783m

<2.11.2-r5
  • L
GHSA-c427-h43c-vf67

<2.11.2-r5
  • M
Information Exposure

<2.11.2-r5
  • H
Resource Exhaustion

<2.11.1-r0
  • H
Allocation of Resources Without Limits or Throttling

<2.11.2-r5
  • L
Incomplete Blacklist

<2.11.1-r0
  • L
GHSA-3wq7-rqq7-wx6j

<2.11.2-r5
  • M
Improper Input Validation

<2.11.2-r5
  • L
GHSA-68rp-wp8r-4726

<2.11.2-r5
  • L
GHSA-2vrm-gr82-f7m5

<2.11.2-r5
  • L
HTTP Response Splitting

<2.11.2-r5
  • M
CVE-2026-26007

<2.11.2-r5
  • L
GHSA-m959-cc7f-wv43

<2.11.2-r5
  • L
Improper Input Validation

<2.11.2-r5
  • L
GHSA-9f5j-8jwj-x28g

<2.11.2-r5
  • M
Insecure Temporary File

<2.11.2-r5
  • L
GHSA-gc5v-m9x4-r6x2

<2.11.2-r5
  • L
GHSA-r6ph-v2qm-q3c2

<2.11.2-r5
  • M
Improper Certificate Validation

<2.11.2-r5
  • L
GHSA-jr27-m4p2-rc6r

<2.11.2-r3
  • L
GHSA-5239-wwwm-4pmq

<2.11.2-r4
  • L
Resource Exhaustion

<2.11.2-r4
  • L
Uncontrolled Recursion

<2.11.2-r3
  • L
GHSA-752w-5fwx-jx9f

<2.11.2-r2
  • L
GHSA-vp96-hxj8-p424

<2.11.2-r2
  • M
Not Failing Securely ('Failing Open')

<2.11.2-r2
  • L
GHSA-5pwr-322w-8jr4

<2.11.2-r2
  • C
Buffer Overflow

<2.11.2-r2
  • L
Insufficient Verification of Data Authenticity

<2.11.2-r2
  • L
GHSA-qjxf-f2mg-c6mc

<2.11.2-r1
  • L
GHSA-78cv-mqj4-43f7

<2.11.2-r1
  • H
Resource Exhaustion

<2.11.2-r1
  • L
Improper Control of Dynamically-Managed Code Resources

<2.11.2-r0
  • L
GHSA-9r5j-7r2x-rv4g

<2.11.2-r0
  • L
Origin Validation Error

<2.11.1-r1
  • L
GHSA-rv5f-ccpm-xjj4

<2.11.1-r1
  • L
Information Exposure

<2.11.1-r0
  • L
Information Exposure Through Log Files

<2.11.1-r0
  • L
GHSA-8r55-rv5w-6pfm

<2.11.1-r0
  • L
Arbitrary Code Injection

<2.11.1-r0
  • L
GHSA-7c2f-r6gc-h92h

<2.11.1-r0
  • L
Information Exposure Through Log Files

<2.11.1-r0
  • L
GHSA-7gcm-g887-7qv7

<2.11.1-r0
  • H
CVE-2026-0994

<2.11.1-r0
  • M
Improper Handling of Windows Device Names

<2.11.1-r0
  • L
GHSA-r837-hpv7-pc2f

<2.11.1-r0
  • L
GHSA-29vq-49wr-vm6x

<2.11.1-r0
  • L
GHSA-gfw7-2v73-69wg

<2.11.1-r0
  • L
GHSA-wh2j-26j7-9728

<2.11.0-r28
  • L
CVE-2026-2473

<2.11.0-r28
  • L
GHSA-27jp-wm6q-gp25

<2.11.0-r26
  • M
Server-Side Request Forgery (SSRF)

<2.11.0-r15
  • L
GHSA-3xgq-45jj-v275

<2.11.0-r15
  • L
GHSA-m5xw-hwxw-fq3j

<2.11.0-r15
  • H
Server-Side Request Forgery (SSRF)

<2.11.0-r15
  • H
Insufficient Entropy

<2.11.0-r15
  • L
Allocation of Resources Without Limits or Throttling

<2.11.0-r15
  • L
GHSA-jr5f-v2jv-69x6

<2.11.0-r15
  • L
GHSA-chg9-3c3p-ch23

<2.11.0-r15
  • L
GHSA-8hc4-vh64-cxmj

<2.11.0-r15
  • L
GHSA-4hjh-wcwx-xvwj

<2.11.0-r15
  • L
GHSA-pph8-gcv7-4qj5

<2.11.0-r15
  • L
Deserialization of Untrusted Data

<2.11.0-r15
  • L
CVE-2024-21538

<2.11.0-r15
  • L
GHSA-fjxv-7rqg-78g4

<2.11.0-r15
  • L
CVE-2025-7783

<2.11.0-r15
  • L
GHSA-8rrh-rw8j-w5fx

<2.11.2-r5
  • M
Directory Traversal

<2.11.2-r5
  • L
GHSA-63vm-454h-vhhq

<2.11.0-r24
  • L
Allocation of Resources Without Limits or Throttling

<2.11.0-r24
  • L
GHSA-58pv-8j8x-9vj2

<2.11.0-r22
  • L
Directory Traversal

<2.11.0-r22
  • L
Link Following

<2.11.0-r21
  • L
GHSA-jm66-cg57-jjv5

<2.11.0-r21
  • L
GHSA-qmgc-5h2g-mvrw

<2.11.0-r21
  • H
Deserialization of Untrusted Data

<2.11.0-r21
  • L
GHSA-38jv-5279-wg99

<2.11.0-r20
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<2.11.0-r20
  • M
Allocation of Resources Without Limits or Throttling

<2.11.0-r19
  • M
HTTP Request Smuggling

<2.11.0-r19
  • M
HTTP Request Smuggling

<2.11.0-r19
  • L
GHSA-fh55-r93g-j68g

<2.11.0-r19
  • L
GHSA-6jhg-hg63-jvvf

<2.11.0-r19
  • H
Allocation of Resources Without Limits or Throttling

<2.11.0-r19
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<2.11.0-r19
  • L
GHSA-mqqc-3gqh-h2x8

<2.11.0-r19
  • M
Directory Traversal

<2.11.0-r19
  • L
GHSA-jj3x-wxrx-4x23

<2.11.0-r19
  • L
GHSA-69f9-5gxw-wvc2

<2.11.0-r19
  • L
Improper Handling of Highly Compressed Data (Data Amplification)

<2.11.0-r19
  • L
GHSA-g84x-mcqj-x9qq

<2.11.0-r19
  • L
GHSA-6mq8-rvhq-8wgg

<2.11.0-r19
  • M
Logging of Excessive Data

<2.11.0-r19
  • L
GHSA-54jq-c3m8-4m76

<2.11.0-r19
  • L
GHSA-428g-f7cq-pgp5

<2.11.0-r18
  • L
Asymmetric Resource Consumption (Amplification)

<2.11.0-r18
  • M
Link Following

<2.11.0-r17
  • L
GHSA-w853-jp5j-5j7f

<2.11.0-r17
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<2.11.0-r16
  • L
GHSA-gm62-xv2j-4w53

<2.11.0-r16
  • L
GHSA-2xpw-w6gg-jr37

<2.11.0-r16
  • H
Allocation of Resources Without Limits or Throttling

<2.11.0-r16
  • L
External Control of File Name or Path

<2.11.0-r15
  • L
CVE-2025-8869

<2.11.2-r5
  • L
GHSA-4xh5-x5gv-qwph

<2.11.2-r5
  • L
CRLF Injection

<2.11.0-r12
  • M
Open Redirect

<2.11.0-r5
  • M
Open Redirect

<2.11.0-r5