Apache Airflow before 3.4.0 allows deserialization of DeadlineAlert fields (CVE-2026-82337)
Dag authors can construct arbitrary classes in scheduler and API server processes.
Stories per day · 30 days
1 stories, newest first · one card per story
1 stories, newest first · one card per story
Dag authors can construct arbitrary classes in scheduler and API server processes.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views