oss-security·11d agoCVE-2026-82311: Apache Airflow FAB provider: FAB password reset never invalidates sessions: string/int _user_id comparison is always false#apache-airflow#cve#fab-providerCVE-2026-82311 3 sources