Apache Airflow Connections API exposes apprise config extra in cleartext (CVE-2026-107474)
The apprise provider's config extra is returned unmasked in the Connections API allowing credential exposure in versions before 3.4.0.
Stories per day · 30 days
1 stories, newest first · one card per story