GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
8 advisories
Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection
High
CVE-2022-45786
was published
for
apache-age-python
(Go)
Feb 4, 2023
Apache HDFS Provider error message suggested
High
CVE-2023-41267
was published
for
apache-airflow-providers-apache-hdfs
(pip)
Sep 14, 2023
Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability
High
CVE-2026-41608
was published
for
thrift
(pip)
Jul 27, 2026
Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop
High
CVE-2026-43871
was published
for
apache/thrift
(Composer)
Jul 27, 2026
Apache Airflow exception-node deserialization permits arbitrary callable execution
High
CVE-2026-58076
was published
for
apache-airflow
(pip)
Aug 12, 2026
Apache Airflow Backfill API parser discrepancy permits cross-DAG authorization bypass
High
CVE-2026-68968
was published
for
apache-airflow
(pip)
Aug 12, 2026
Apache Airflow Task SDK Callback deserialization can import arbitrary modules in the scheduler
High
CVE-2026-67587
was published
for
apache-airflow
(pip)
Aug 12, 2026
Apache Airflow scheduler unsafely deserializes human-in-the-loop task next_kwargs
High
CVE-2026-67260
was published
for
apache-airflow
(pip)
Aug 12, 2026
ProTip!
Advisories are also available from the
GraphQL API