Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Security update for airflow and related packages
published 9 months ago
Summary
A security issue affects airflow, airflow-bitnami-compat, az and 61 more (Chainguard). The advisory does not describe the issue in detail. Update to 2.9.3-r1 or later. See the linked advisory for details.
What to do
- Update chainguard airflow to version 2.9.3-r1.
- Update chainguard airflow-bitnami-compat to version 2.9.3-r1.
- Update chainguard az to version 2.62.0-r1.
- Update chainguard az-iamguarded-compat to version 2.62.0-r1.
- Update chainguard checkov to version 3.0.34-r1.
- Update chainguard k8s-sidecar-1.22 to version 1.22.4-r2.
- Update chainguard katib-controller to version 0.18.0-r0.
- Update chainguard katib-controller-compat to version 0.18.0-r0.
- Update chainguard katib-db-manager to version 0.18.0-r0.
- Update chainguard katib-db-manager-compat to version 0.18.0-r0.
- Update chainguard katib-earlystopping to version 0.18.0-r0.
- Update chainguard katib-file-metricscollector to version 0.18.0-r0.
- Update chainguard katib-file-metricscollector-compat to version 0.18.0-r0.
- Update chainguard katib-suggestion-goptuna to version 0.18.0-r0.
- Update chainguard katib-suggestion-goptuna-compat to version 0.18.0-r0.
- Update chainguard katib-suggestion-hyperband to version 0.18.0-r0.
- Update chainguard katib-suggestion-hyperopt to version 0.18.0-r0.
- Update chainguard katib-suggestion-nas-darts to version 0.18.0-r0.
- Update chainguard katib-suggestion-nas-enas to version 0.18.0-r0.
- Update chainguard katib-suggestion-optuna-enas to version 0.18.0-r0.
- Update chainguard katib-suggestion-pbt-enas to version 0.18.0-r0.
- Update chainguard katib-suggestion-skopt-enas to version 0.18.0-r0.
- Update chainguard katib-tfevent-metricscollector to version 0.18.0-r0.
- Update chainguard kubeflow-katib to version 0.18.0-r0.
- Update chainguard nemo to version 1.23.0-r12.
- Update chainguard nvidia-nsight-compute-13.1 to version 2025.4.1.2-r1.
- Update chainguard nvidia-nsight-compute-13.2 to version 2026.1.1.2-r2.
- Update chainguard py3-cassandra-medusa to version 0.23.0-r30.
- Update chainguard py3-cassandra-medusa-compat to version 0.23.0-r30.
- Update chainguard py3-pipenv to version 2024.4.1-r0.
- Update chainguard py3-supported-pipenv to version 2024.4.1-r0.
- Update chainguard py3.10-pipenv to version 2024.4.1-r0.
- Update chainguard py3.10-pipenv-bin to version 2024.4.1-r0.
- Update chainguard py3.10-pytorch-cuda-11.8 to version 2.3.1-r2.
- Update chainguard py3.10-pytorch-cuda-12.3 to version 2.3.1-r2.
- Update chainguard py3.10-torchvision-cuda-12.3 to version 0.18.1-r4.
- Update chainguard py3.10-wheels-torch-cuda-11.8 to version 2.3.1-r2.
- Update chainguard py3.10-wheels-torch-cuda-12.3 to version 2.3.1-r2.
- Update chainguard py3.10-wheels-torchvision-cuda-12.3 to version 0.18.1-r4.
- Update chainguard py3.11-pipenv to version 2024.4.1-r0.
- Update chainguard py3.11-pipenv-bin to version 2024.4.1-r0.
- Update chainguard py3.11-pytorch-cuda-12.3 to version 2.3.1-r6.
- Update chainguard py3.11-torchaudio-cuda-12.3 to version 2.3.1-r1.
- Update chainguard py3.11-torchvision-cuda-12.3 to version 0.18.1-r5.
- Update chainguard py3.11-wheels-torch-cuda-12.3 to version 2.3.1-r6.
- Update chainguard py3.11-wheels-torchaudio-cuda-12.3 to version 2.3.1-r1.
- Update chainguard py3.11-wheels-torchvision-cuda-12.3 to version 0.18.1-r5.
- Update chainguard py3.12-pipenv to version 2024.4.1-r0.
- Update chainguard py3.12-pipenv-bin to version 2024.4.1-r0.
- Update chainguard py3.12-pytorch-cuda-11.8 to version 2.3.1-r1.
- Update chainguard py3.12-pytorch-cuda-12.3 to version 2.3.1-r1.
- Update chainguard py3.12-torchvision-cuda-12.3 to version 0.18.1-r2.
- Update chainguard py3.12-wheels-torch-cuda-11.8 to version 2.3.1-r1.
- Update chainguard py3.12-wheels-torch-cuda-12.3 to version 2.3.1-r1.
- Update chainguard py3.12-wheels-torchvision-cuda-12.3 to version 0.18.1-r2.
- Update chainguard py3.13-pipenv to version 2024.4.1-r0.
- Update chainguard py3.13-pipenv-bin to version 2024.4.1-r0.
- Update chainguard py3.9-setuptools to version 72.1.0-r0.
- Update chainguard reflex to version 0.7.3-r0.
- Update chainguard request-1276 to version 0.23.0-r0.
- Update chainguard request-1276-compat to version 0.23.0-r0.
- Update chainguard superset to version 4.0.2-r3.
- Update chainguard superset-entrypoint to version 4.0.2-r3.
- Update chainguard superset-iamguarded-compat to version 4.0.2-r3.
- Update wolfi airflow to version 2.9.3-r1.
- Update wolfi airflow-bitnami-compat to version 2.9.3-r1.
- Update wolfi az to version 2.62.0-r1.
- Update wolfi az-iamguarded-compat to version 2.62.0-r1.
- Update wolfi checkov to version 3.0.34-r1.
- Update wolfi katib-controller to version 0.18.0-r0.
- Update wolfi katib-controller-compat to version 0.18.0-r0.
- Update wolfi katib-db-manager to version 0.18.0-r0.
- Update wolfi katib-db-manager-compat to version 0.18.0-r0.
- Update wolfi katib-earlystopping to version 0.18.0-r0.
- Update wolfi katib-file-metricscollector to version 0.18.0-r0.
- Update wolfi katib-file-metricscollector-compat to version 0.18.0-r0.
- Update wolfi katib-suggestion-goptuna to version 0.18.0-r0.
- Update wolfi katib-suggestion-goptuna-compat to version 0.18.0-r0.
- Update wolfi katib-suggestion-hyperband to version 0.18.0-r0.
- Update wolfi katib-suggestion-hyperopt to version 0.18.0-r0.
- Update wolfi katib-suggestion-nas-darts to version 0.18.0-r0.
- Update wolfi katib-suggestion-nas-enas to version 0.18.0-r0.
- Update wolfi katib-suggestion-optuna-enas to version 0.18.0-r0.
- Update wolfi katib-suggestion-pbt-enas to version 0.18.0-r0.
- Update wolfi katib-suggestion-skopt-enas to version 0.18.0-r0.
- Update wolfi katib-tfevent-metricscollector to version 0.18.0-r0.
- Update wolfi kubeflow-katib to version 0.18.0-r0.
- Update wolfi py3-cassandra-medusa to version 0.23.0-r30.
- Update wolfi py3-cassandra-medusa-compat to version 0.23.0-r30.
- Update wolfi py3-pipenv to version 2024.4.1-r0.
- Update wolfi py3-supported-pipenv to version 2024.4.1-r0.
- Update wolfi py3.10-pipenv to version 2024.4.1-r0.
- Update wolfi py3.10-pipenv-bin to version 2024.4.1-r0.
- Update wolfi py3.11-pipenv to version 2024.4.1-r0.
- Update wolfi py3.11-pipenv-bin to version 2024.4.1-r0.
- Update wolfi py3.12-pipenv to version 2024.4.1-r0.
- Update wolfi py3.12-pipenv-bin to version 2024.4.1-r0.
- Update wolfi py3.13-pipenv to version 2024.4.1-r0.
- Update wolfi py3.13-pipenv-bin to version 2024.4.1-r0.
- Update wolfi reflex to version 0.7.3-r0.
- Update wolfi superset to version 4.0.2-r3.
- Update wolfi superset-entrypoint to version 4.0.2-r3.
- Update wolfi superset-iamguarded-compat to version 4.0.2-r3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | airflow |
< 2.9.3-r1 Fix: upgrade to 2.9.3-r1
|
| Chainguard | chainguard | airflow-bitnami-compat |
< 2.9.3-r1 Fix: upgrade to 2.9.3-r1
|
| Chainguard | chainguard | az |
< 2.62.0-r1 Fix: upgrade to 2.62.0-r1
|
| Chainguard | chainguard | az-iamguarded-compat |
< 2.62.0-r1 Fix: upgrade to 2.62.0-r1
|
| Chainguard | chainguard | checkov |
< 3.0.34-r1 Fix: upgrade to 3.0.34-r1
|
| Chainguard | chainguard | k8s-sidecar-1.22 |
< 1.22.4-r2 Fix: upgrade to 1.22.4-r2
|
| Chainguard | chainguard | katib-controller |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Chainguard | chainguard | katib-controller-compat |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Chainguard | chainguard | katib-db-manager |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Chainguard | chainguard | katib-db-manager-compat |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Chainguard | chainguard | katib-earlystopping |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Chainguard | chainguard | katib-file-metricscollector |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Chainguard | chainguard | katib-file-metricscollector-compat |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Chainguard | chainguard | katib-suggestion-goptuna |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Chainguard | chainguard | katib-suggestion-goptuna-compat |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Chainguard | chainguard | katib-suggestion-hyperband |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Chainguard | chainguard | katib-suggestion-hyperopt |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Chainguard | chainguard | katib-suggestion-nas-darts |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Chainguard | chainguard | katib-suggestion-nas-enas |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Chainguard | chainguard | katib-suggestion-optuna-enas |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Chainguard | chainguard | katib-suggestion-pbt-enas |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Chainguard | chainguard | katib-suggestion-skopt-enas |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Chainguard | chainguard | katib-tfevent-metricscollector |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Chainguard | chainguard | kubeflow-katib |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Chainguard | chainguard | nemo |
< 1.23.0-r12 Fix: upgrade to 1.23.0-r12
|
| Chainguard | chainguard | nvidia-nsight-compute-13.1 |
< 2025.4.1.2-r1 Fix: upgrade to 2025.4.1.2-r1
|
| Chainguard | chainguard | nvidia-nsight-compute-13.2 |
< 2026.1.1.2-r2 Fix: upgrade to 2026.1.1.2-r2
|
| Chainguard | chainguard | py3-cassandra-medusa |
< 0.23.0-r30 Fix: upgrade to 0.23.0-r30
|
| Chainguard | chainguard | py3-cassandra-medusa-compat |
< 0.23.0-r30 Fix: upgrade to 0.23.0-r30
|
| Chainguard | chainguard | py3-pipenv |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Chainguard | chainguard | py3-supported-pipenv |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Chainguard | chainguard | py3.10-pipenv |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Chainguard | chainguard | py3.10-pipenv-bin |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Chainguard | chainguard | py3.10-pytorch-cuda-11.8 |
< 2.3.1-r2 Fix: upgrade to 2.3.1-r2
|
| Chainguard | chainguard | py3.10-pytorch-cuda-12.3 |
< 2.3.1-r2 Fix: upgrade to 2.3.1-r2
|
| Chainguard | chainguard | py3.10-torchvision-cuda-12.3 |
< 0.18.1-r4 Fix: upgrade to 0.18.1-r4
|
| Chainguard | chainguard | py3.10-wheels-torch-cuda-11.8 |
< 2.3.1-r2 Fix: upgrade to 2.3.1-r2
|
| Chainguard | chainguard | py3.10-wheels-torch-cuda-12.3 |
< 2.3.1-r2 Fix: upgrade to 2.3.1-r2
|
| Chainguard | chainguard | py3.10-wheels-torchvision-cuda-12.3 |
< 0.18.1-r4 Fix: upgrade to 0.18.1-r4
|
| Chainguard | chainguard | py3.11-pipenv |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Chainguard | chainguard | py3.11-pipenv-bin |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Chainguard | chainguard | py3.11-pytorch-cuda-12.3 |
< 2.3.1-r6 Fix: upgrade to 2.3.1-r6
|
| Chainguard | chainguard | py3.11-torchaudio-cuda-12.3 |
< 2.3.1-r1 Fix: upgrade to 2.3.1-r1
|
| Chainguard | chainguard | py3.11-torchvision-cuda-12.3 |
< 0.18.1-r5 Fix: upgrade to 0.18.1-r5
|
| Chainguard | chainguard | py3.11-wheels-torch-cuda-12.3 |
< 2.3.1-r6 Fix: upgrade to 2.3.1-r6
|
| Chainguard | chainguard | py3.11-wheels-torchaudio-cuda-12.3 |
< 2.3.1-r1 Fix: upgrade to 2.3.1-r1
|
| Chainguard | chainguard | py3.11-wheels-torchvision-cuda-12.3 |
< 0.18.1-r5 Fix: upgrade to 0.18.1-r5
|
| Chainguard | chainguard | py3.12-pipenv |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Chainguard | chainguard | py3.12-pipenv-bin |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Chainguard | chainguard | py3.12-pytorch-cuda-11.8 |
< 2.3.1-r1 Fix: upgrade to 2.3.1-r1
|
Showing 50 of 103. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | py3.12-pytorch-cuda-12.3 |
< 2.3.1-r1 Fix: upgrade to 2.3.1-r1
|
| Chainguard | chainguard | py3.12-torchvision-cuda-12.3 |
< 0.18.1-r2 Fix: upgrade to 0.18.1-r2
|
| Chainguard | chainguard | py3.12-wheels-torch-cuda-11.8 |
< 2.3.1-r1 Fix: upgrade to 2.3.1-r1
|
| Chainguard | chainguard | py3.12-wheels-torch-cuda-12.3 |
< 2.3.1-r1 Fix: upgrade to 2.3.1-r1
|
| Chainguard | chainguard | py3.12-wheels-torchvision-cuda-12.3 |
< 0.18.1-r2 Fix: upgrade to 0.18.1-r2
|
| Chainguard | chainguard | py3.13-pipenv |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Chainguard | chainguard | py3.13-pipenv-bin |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Chainguard | chainguard | py3.9-setuptools |
< 72.1.0-r0 Fix: upgrade to 72.1.0-r0
|
| Chainguard | chainguard | reflex |
< 0.7.3-r0 Fix: upgrade to 0.7.3-r0
|
| Chainguard | chainguard | request-1276 |
< 0.23.0-r0 Fix: upgrade to 0.23.0-r0
|
| Chainguard | chainguard | request-1276-compat |
< 0.23.0-r0 Fix: upgrade to 0.23.0-r0
|
| Chainguard | chainguard | superset |
< 4.0.2-r3 Fix: upgrade to 4.0.2-r3
|
| Chainguard | chainguard | superset-entrypoint |
< 4.0.2-r3 Fix: upgrade to 4.0.2-r3
|
| Chainguard | chainguard | superset-iamguarded-compat |
< 4.0.2-r3 Fix: upgrade to 4.0.2-r3
|
| Wolfi | wolfi | airflow |
< 2.9.3-r1 Fix: upgrade to 2.9.3-r1
|
| Wolfi | wolfi | airflow-bitnami-compat |
< 2.9.3-r1 Fix: upgrade to 2.9.3-r1
|
| Wolfi | wolfi | az |
< 2.62.0-r1 Fix: upgrade to 2.62.0-r1
|
| Wolfi | wolfi | az-iamguarded-compat |
< 2.62.0-r1 Fix: upgrade to 2.62.0-r1
|
| Wolfi | wolfi | checkov |
< 3.0.34-r1 Fix: upgrade to 3.0.34-r1
|
| Wolfi | wolfi | katib-controller |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Wolfi | wolfi | katib-controller-compat |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Wolfi | wolfi | katib-db-manager |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Wolfi | wolfi | katib-db-manager-compat |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Wolfi | wolfi | katib-earlystopping |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Wolfi | wolfi | katib-file-metricscollector |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Wolfi | wolfi | katib-file-metricscollector-compat |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Wolfi | wolfi | katib-suggestion-goptuna |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Wolfi | wolfi | katib-suggestion-goptuna-compat |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Wolfi | wolfi | katib-suggestion-hyperband |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Wolfi | wolfi | katib-suggestion-hyperopt |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Wolfi | wolfi | katib-suggestion-nas-darts |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Wolfi | wolfi | katib-suggestion-nas-enas |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Wolfi | wolfi | katib-suggestion-optuna-enas |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Wolfi | wolfi | katib-suggestion-pbt-enas |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Wolfi | wolfi | katib-suggestion-skopt-enas |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Wolfi | wolfi | katib-tfevent-metricscollector |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Wolfi | wolfi | kubeflow-katib |
< 0.18.0-r0 Fix: upgrade to 0.18.0-r0
|
| Wolfi | wolfi | py3-cassandra-medusa |
< 0.23.0-r30 Fix: upgrade to 0.23.0-r30
|
| Wolfi | wolfi | py3-cassandra-medusa-compat |
< 0.23.0-r30 Fix: upgrade to 0.23.0-r30
|
| Wolfi | wolfi | py3-pipenv |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Wolfi | wolfi | py3-supported-pipenv |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Wolfi | wolfi | py3.10-pipenv |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Wolfi | wolfi | py3.10-pipenv-bin |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Wolfi | wolfi | py3.11-pipenv |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Wolfi | wolfi | py3.11-pipenv-bin |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Wolfi | wolfi | py3.12-pipenv |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Wolfi | wolfi | py3.12-pipenv-bin |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Wolfi | wolfi | py3.13-pipenv |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Wolfi | wolfi | py3.13-pipenv-bin |
< 2024.4.1-r0 Fix: upgrade to 2024.4.1-r0
|
| Wolfi | wolfi | reflex |
< 0.7.3-r0 Fix: upgrade to 0.7.3-r0
|
| Wolfi | wolfi | superset |
< 4.0.2-r3 Fix: upgrade to 4.0.2-r3
|
| Wolfi | wolfi | superset-entrypoint |
< 4.0.2-r3 Fix: upgrade to 4.0.2-r3
|
| Wolfi | wolfi | superset-iamguarded-compat |
< 4.0.2-r3 Fix: upgrade to 4.0.2-r3
|
Original advisory text
CGA-qx5j-77cf-cv77
Timeline
Published29 Jan 2026
Updated3 Jul 2026
First seen3 Jul 2026
Track software like this
Free during beta