Homepage

apache-airflow-providers-hashicorp@4.6.0

Provider package apache-airflow-providers-hashicorp for Apache Airflow

  • latest version

    4.8.2

  • latest non vulnerable version

    4.8.2

  • first published

    5 years ago

  • latest version published

    2 days ago

  • licenses detected

  • View apache-airflow-providers-hashicorp package health on Snyk  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the apache-airflow-providers-hashicorp package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Not Failing Securely ('Failing Open')

    apache-airflow-providers-hashicorp is a Provider package apache-airflow-providers-hashicorp for Apache Airflow

    Affected versions of this package are vulnerable to Not Failing Securely ('Failing Open') via VaultBackend in vault.py, where connections_path, variables_path, and config_path each accept only a single string path, preventing users from specifying multiple fallback paths for secret resolution. An attacker or misconfigured deployment relying on global_secrets_path as a fallback cannot express ordered multi-path lookup, causing secrets to be silently missed when the primary path does not contain the requested key. The global_secrets_path parameter is deprecated and no longer the correct mechanism for fallback path configuration.

    How to fix Not Failing Securely ('Failing Open')?

    Upgrade apache-airflow-providers-hashicorp to version 4.8.0 or higher.

    [4.6.0,4.8.0)
    Go back to all versions of this package