oss-security·18d agoCVE-2026-75156: Apache Airflow FAB provider: FAB Azure AD OAuth: id_token issuer/audience not validated — cross-tenant authentication bypass#apache-airflow#authentication-bypass#azure-adCVE-2026-75156