Apache Airflow vulnerabilities

A vulnerability in Apache Airflow allows authenticated users to bypass some restrictions, enabling code execution in the webserver context and access to certain DAGs that the user normally cannot access. The 'Run Task' feature has been deemed dangerous and removed in version 2.6.0.

Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang.

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unauthorized read access to a DAG through the URL.

In Apache Airflow, there is a vulnerability that may expose potentially sensitive values to users in certain situations. This issue affects versions from 2.5.0 before 2.6.2.