Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.3
Airflow-2 can be exploited until updated
published 1 month ago
Summary
The Airflow-2 package may allow unauthorized actions if it is not upgraded. Updating to the latest version removes this risk. Apply the vendor’s security patch as soon as possible.
What to do
- Update cleanstart airflow-2 to version 2.10.3-r2.
- Update airflow-2 to version 2.10.3-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | airflow-2 |
< 2.10.3-r2 Fix: upgrade to 2.10.3-r2
|
| CleanStart | – | airflow-2 |
< 2.10.3-r2 Fix: upgrade to 2.10.3-r2
|
Original advisory text
Security fix for GHSA-38jv-5279-wg99 applied in: airflow-2 2.10.3-r2
Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details.
Severity
8.3
High
Timeline
Published18 Sep 2026
Updated15 Oct 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-YM85365 · OSV
Track software like this
Free during beta