Apache Airflow scheduler deserializes task-controlled XCom values (CVE-2026-86829)
Dag authors control XCom values that the scheduler fully deserializes during dependency evaluation.
Stories per day · 30 days
1 stories, newest first · one card per story