airflow-iamguardedpackaged by Chainguard
packaged by Chainguard
Last changed
Request a free trial
Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.
Tag:
Severity:All
Expand | CVE ID | Severity | Package | Version | Last detected |
|---|---|---|---|---|---|
CVE-2026-8838 | Critical | redshift-connector | 2.1.12 | ||
CVE-2026-50203 | Critical | apache-airflow-providers-sftp | 5.7.0 | ||
CVE-2026-54513 | High | jackson-databind | 2.16.1 | ||
CVE-2026-9669 | High | python-3.12 | 3.12.13-r10 | ||
CVE-2026-44431 | High | urllib3 | 2.6.3 | ||
CVE-2026-45360 | High | apache-airflow | 2.11.2 | ||
CVE-2026-53539 | High | python-multipart | 0.0.26 | ||
GHSA-82j2-j2ch-gfr8 | High | rustls-webpki | 0.103.10 | ||
CVE-2026-48526 | High | pyjwt | 2.12.0 | ||
CVE-2026-4786 | High | python-3.12 | 3.12.13-r10 | ||
CVE-2024-23342 | High | ecdsa | 0.19.2 | ||
CVE-2026-41486 | High | ray | 2.54.0 | ||
CVE-2026-49853 | High | tornado | 6.5.5 | ||
CVE-2026-15308 | High | python-3.12 | 3.12.13-r10 | ||
CVE-2026-44307 | High | mako | 1.3.11 | ||
CVE-2026-3644 | High | python-3.12 | 3.12.13-r10 | ||
CVE-2026-25087 | High | pyarrow | 22.0.0 | ||
CVE-2026-41066 | High | lxml | 5.4.0 | ||
CVE-2026-7210 | High | python-3.12 | 3.12.13-r10 | ||
CVE-2026-40961 | High | apache-airflow | 2.11.2 | ||
CVE-2026-59886 | High | pyasn1 | 0.6.3 | ||
GHSA-537c-gmf6-5ccf | High | cryptography | 46.0.7 | ||
CVE-2026-42561 | High | python-multipart | 0.0.26 | ||
CVE-2026-4224 | High | python-3.12 | 3.12.13-r10 | ||
CVE-2026-54512 | High | jackson-databind | 2.16.1 | ||
CVE-2026-49476 | High | soupsieve | 2.8.3 | ||
CVE-2026-49477 | High | soupsieve | 2.8.3 | ||
CVE-2026-59885 | High | pyasn1 | 0.6.3 | ||
CVE-2026-45361 | High | apache-airflow-providers-google | 20.0.0 | ||
GHSA-6v7p-g79w-8964 | High | msgpack | 1.1.2 | ||
CVE-2026-44432 | High | urllib3 | 2.6.3 | ||
CVE-2025-54550 | High | apache-airflow | 2.11.2 | ||
CVE-2026-27173 | High | apache-airflow-providers-cncf-kubernetes | 10.13.0 | ||
CVE-2026-49855 | High | tornado | 6.5.5 | ||
GHSA-r7wm-3cxj-wff9 | High | jackson-core | 2.16.1 | ||
GHSA-82j2-j2ch-gfr8 | High | rustls-webpki | 0.103.10 | ||
CVE-2026-54276 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-54276 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-48525 | Medium | pyjwt | 2.12.0 | ||
CVE-2026-54514 | Medium | jackson-databind | 2.16.1 | ||
CVE-2026-53533 | Medium | aiosmtplib | 5.1.0 | ||
GHSA-fp55-jw48-c537 | Medium | astral-tokio-tar | 0.6.0 | ||
CVE-2026-46745 | Medium | apache-airflow-providers-fab | 1.5.4 | ||
CVE-2025-15367 | Medium | python-3.12 | 3.12.13-r10 | ||
GHSA-3cv2-h65g-fgmm | Medium | astral-tokio-tar | 0.6.0 | ||
CVE-2026-40861 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-48726 | Medium | apache-airflow | 2.11.2 | ||
CVE-2025-15366 | Medium | python-3.12 | 3.12.13-r10 | ||
CVE-2026-38743 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-45192 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-6019 | Medium | python-3.12 | 3.12.13-r10 | ||
GHSA-3pv8-6f4r-ffg2 | Medium | tar | 0.4.45 | ||
GHSA-4gg8-gxpx-9rph | Medium | uv | 0.11.6 | ||
CVE-2026-34477 | Medium | log4j-core | 2.25.3 | ||
GHSA-72hv-8253-57qq | Medium | jackson-core | 2.16.1 | ||
CVE-2026-42360 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-46764 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-34993 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-34993 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-45309 | Medium | asyncssh | 2.22.0 | ||
CVE-2026-45409 | Medium | idna | 3.11 | ||
CVE-2025-58065 | Medium | flask-appbuilder | 4.5.4 | ||
GHSA-3pv8-6f4r-ffg2 | Medium | tar | 0.4.45 | ||
CVE-2026-44681 | Medium | authlib | 1.6.11 | ||
CVE-2026-2297 | Medium | python-3.12 | 3.12.13-r10 | ||
CVE-2026-48523 | Medium | pyjwt | 2.12.0 | ||
CVE-2026-24098 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-34480 | Medium | log4j-core | 2.25.3 | ||
CVE-2026-34478 | Medium | log4j-core | 2.25.3 | ||
CVE-2026-59888 | Medium | jackson-databind | 2.16.1 | ||
CVE-2025-32962 | Medium | flask-appbuilder | 4.5.4 | ||
CVE-2026-42526 | Medium | apache-airflow-providers-amazon | 9.22.0 | ||
GHSA-3cv2-h65g-fgmm | Medium | astral-tokio-tar | 0.6.0 | ||
GHSA-vfvv-c25p-m7mm | Medium | rkyv | 0.8.15 | ||
CVE-2026-54278 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-54278 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-47265 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-47265 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-54274 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-54274 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-25219 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-40690 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-54515 | Medium | jackson-databind | 2.16.1 | ||
CVE-2025-12781 | Medium | python-3.12 | 3.12.13-r10 | ||
CVE-2026-45409 | Medium | idna | 3.11 | ||
CVE-2026-41016 | Medium | apache-airflow-providers-smtp | 2.4.2 | ||
GHSA-pw6j-qg29-8w7f | Medium | tornado | 6.5.5 | ||
CVE-2026-3446 | Medium | python-3.12 | 3.12.13-r10 | ||
GHSA-4gg8-gxpx-9rph | Medium | uv | 0.11.6 | ||
GHSA-fp55-jw48-c537 | Medium | astral-tokio-tar | 0.6.0 | ||
CVE-2026-48522 | Medium | pyjwt | 2.12.0 | ||
CVE-2026-54277 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-54277 | Medium | aiohttp | 3.13.4 | ||
GHSA-4gg8-gxpx-9rph | Medium | uv | 0.11.6 | ||
GHSA-vfvv-c25p-m7mm | Medium | rkyv | 0.8.15 | ||
CVE-2026-41018 | Medium | apache-airflow-providers-elasticsearch | 6.5.0 | ||
CVE-2026-49267 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-42358 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-54273 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-54273 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-54280 | Low | aiohttp | 3.13.3 | ||
CVE-2026-54280 | Low | aiohttp | 3.13.4 | ||
GHSA-965h-392x-2mh5 | Low | rustls-webpki | 0.103.10 | ||
GHSA-cq8v-f236-94qc | Low | rand | 0.9.2 | ||
CVE-2026-49854 | Low | tornado | 6.5.5 | ||
CVE-2025-13462 | Low | python-3.12 | 3.12.13-r10 | ||
GHSA-cq8v-f236-94qc | Low | rand | 0.8.5 | ||
CVE-2026-44405 | Low | paramiko | 3.5.1 | ||
CVE-2026-54275 | Low | aiohttp | 3.13.3 | ||
CVE-2026-54275 | Low | aiohttp | 3.13.4 | ||
CVE-2026-53538 | Low | python-multipart | 0.0.26 | ||
GHSA-xgp8-3hg3-c2mh | Low | rustls-webpki | 0.103.10 | ||
CVE-2026-53540 | Low | python-multipart | 0.0.26 | ||
CVE-2026-54279 | Low | aiohttp | 3.13.3 | ||
CVE-2026-54279 | Low | aiohttp | 3.13.4 | ||
GHSA-xx64-wwv2-hcqq | Low | astral-tokio-tar | 0.6.0 | ||
CVE-2026-48524 | Low | pyjwt | 2.12.0 | ||
CVE-2026-53537 | Low | python-multipart | 0.0.26 | ||
GHSA-xgp8-3hg3-c2mh | Low | rustls-webpki | 0.103.10 | ||
GHSA-cq8v-f236-94qc | Low | rand | 0.8.5 | ||
GHSA-cq8v-f236-94qc | Low | rand | 0.9.2 | ||
GHSA-965h-392x-2mh5 | Low | rustls-webpki | 0.103.10 | ||
GHSA-xx64-wwv2-hcqq | Low | astral-tokio-tar | 0.6.0 | ||
CVE-2026-50269 | Low | aiohttp | 3.13.3 | ||
CVE-2026-50269 | Low | aiohttp | 3.13.4 | ||
CVE-2026-3479 | Unknown | python-3.12 | 3.12.13-r10 |
Last updated:
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.