Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.7
Airflow packages updated to stop malicious code execution
published 1 month ago
Summary
The Airflow software versions listed may let an attacker run unwanted code on your system. Updating to the newer releases removes this risk. Apply the latest Airflow updates as soon as possible.
What to do
- Update cleanstart airflow-2 to version 2.10.3-r3.
- Update cleanstart airflow-3 to version 3.1.8-r4.
- Update cleanstart airflow-3 to version 3.2.1-r4.
- Update airflow-2 to version 2.10.3-r3.
- Update airflow-3 to version 3.1.8-r4.
- Update airflow-3 to version 3.2.1-r4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | airflow-2 |
< 2.10.3-r3 Fix: upgrade to 2.10.3-r3
|
| CleanStart | cleanstart | airflow-3 |
< 3.1.8-r4 < 3.2.1-r4 Fix: upgrade to 3.1.8-r4
|
| CleanStart | – | airflow-2 |
< 2.10.3-r3 Fix: upgrade to 2.10.3-r3
|
| CleanStart | – | airflow-3 |
< 3.1.8-r4 < 3.2.1-r4 Fix: upgrade to 3.1.8-r4
|
Original advisory text
Security fix for GHSA-jp82-jpqv-5vv3 applied in: airflow-2 2.10.3-r3, airflow-3 3.1.8-r4, airflow-3 3.2.1-r4
GHSA-jp82-jpqv-5vv3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.
Severity
3.7
Low
Timeline
Published18 Sep 2026
Updated15 Oct 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-PS49478 · OSV
Track software like this
Free during beta