CVE-2026-82355: Apache Airflow: Session cookie silently overrides explicit Authorization bearer header, enabling session fixation
Apache Airflow lets a session cookie override a bearer token, enabling session fixation.
1 stories, newest first · one card per story
Apache Airflow lets a session cookie override a bearer token, enabling session fixation.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views