oss-security·11d agoCVE-2026-86462: Apache Airflow FAB provider: FAB Admin password PATCH does not invalidate database-backed sessions#apache-airflow#cve#fab-providerCVE-2026-86462 3 sources
oss-security·11d agoCVE-2026-76186: Apache Airflow Keycloak provider: Keycloak token cookies not bound to Airflow session identity#apache-airflow#authorization#cookieCVE-2026-76186 2 sources