airflow-iamguardedpackaged by Chainguard
packaged by Chainguard
Last changed
Request a free trial
Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.
Tag:
Severity:All
Expand | CVE ID | Severity | Package | Version | Last detected |
|---|---|---|---|---|---|
CVE-2026-33264 | Critical | apache-airflow | 2.11.2 | ||
GHSA-6q48-6c7w-9gw2 | Critical | certifi | 2026.2.25 | ||
GHSA-hq85-5cpj-mr62 | Critical | uv | 0.11.6 | ||
CVE-2026-8838 | Critical | redshift-connector | 2.1.12 | ||
CVE-2026-50203 | Critical | apache-airflow-providers-sftp | 5.7.0 | ||
CVE-2026-41486 | High | ray | 2.54.0 | ||
CVE-2026-69244 | High | aiohttp | 3.13.3 | ||
CVE-2026-91776 | High | jackson-databind | 2.16.1 | ||
CVE-2026-68497 | High | jackson-databind | 2.16.1 | ||
CVE-2026-111064 | High | aiohttp | 3.13.3 | ||
CVE-2026-111064 | High | aiohttp | 3.13.4 | ||
CVE-2026-57516 | High | ray | 2.54.0 | ||
CVE-2026-49853 | High | tornado | 6.5.5 | ||
CVE-2026-111066 | High | aiohttp | 3.13.3 | ||
CVE-2026-111066 | High | aiohttp | 3.13.4 | ||
CVE-2026-44307 | High | mako | 1.3.11 | ||
GHSA-2g87-pp6c-29x5 | High | aiohttp | 3.13.3 | ||
CVE-2026-54512 | High | jackson-databind | 2.16.1 | ||
GHSA-4w2j-m93h-cj5j | High | quinn-proto | 0.11.14 | ||
CVE-2026-59885 | High | pyasn1 | 0.6.3 | ||
CVE-2026-59886 | High | pyasn1 | 0.6.3 | ||
GHSA-537c-gmf6-5ccf | High | cryptography | 46.0.7 | ||
CVE-2026-53539 | High | python-multipart | 0.0.26 | ||
CVE-2026-69247 | High | cryptography | 46.0.7 | ||
CVE-2026-82397 | High | tornado | 6.5.5 | ||
GHSA-82j2-j2ch-gfr8 | High | rustls-webpki | 0.103.10 | ||
CVE-2026-45361 | High | apache-airflow-providers-google | 20.0.0 | ||
CVE-2026-25087 | High | pyarrow | 22.0.0 | ||
CVE-2026-59884 | High | pyasn1 | 0.6.3 | ||
CVE-2025-54550 | High | apache-airflow | 2.11.2 | ||
CVE-2026-104851 | High | fsspec | 2026.2.0 | ||
GHSA-chx6-46f5-w4vp | High | tornado | 6.5.5 | ||
GHSA-2g87-pp6c-29x5 | High | aiohttp | 3.13.4 | ||
GHSA-4w2j-m93h-cj5j | High | quinn-proto | 0.11.14 | ||
GHSA-82j2-j2ch-gfr8 | High | rustls-webpki | 0.103.10 | ||
CVE-2026-40961 | High | apache-airflow | 2.11.2 | ||
CVE-2026-49297 | High | apache-airflow-providers-google | 20.0.0 | ||
CVE-2026-42561 | High | python-multipart | 0.0.26 | ||
GHSA-6v7p-g79w-8964 | High | msgpack | 1.1.2 | ||
CVE-2026-68494 | High | jackson-core | 2.16.1 | ||
CVE-2024-23342 | High | ecdsa | 0.19.2 | ||
CVE-2026-69244 | High | aiohttp | 3.13.4 | ||
CVE-2026-68968 | High | apache-airflow | 2.11.2 | ||
CVE-2026-54399 | High | httpcore5 | 5.0.2 | ||
CVE-2026-49855 | High | tornado | 6.5.5 | ||
CVE-2026-69249 | High | cryptography | 46.0.7 | ||
CVE-2026-89425 | High | jackson-core | 2.16.1 | ||
CVE-2026-91777 | High | jackson-databind | 2.16.1 | ||
CVE-2026-41066 | High | lxml | 5.4.0 | ||
CVE-2026-27173 | High | apache-airflow-providers-cncf-kubernetes | 10.13.0 | ||
GHSA-c2m8-h5v5-343r | High | tornado | 6.5.5 | ||
CVE-2026-59939 | High | httplib2 | 0.31.2 | ||
CVE-2026-54513 | High | jackson-databind | 2.16.1 | ||
CVE-2026-34478 | Medium | log4j-core | 2.25.3 | ||
CVE-2026-48828 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-83557 | Medium | jackson-databind | 2.16.1 | ||
CVE-2026-111065 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-111065 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-68969 | Medium | apache-airflow | 2.11.2 | ||
CVE-2025-12781 | Medium | python-3.12 | 3.12.15-r4 | ||
CVE-2026-42526 | Medium | apache-airflow-providers-amazon | 9.22.0 | ||
CVE-2026-54276 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-41016 | Medium | apache-airflow-providers-smtp | 2.4.2 | ||
CVE-2026-6019 | Medium | python-3.12 | 3.12.15-r4 | ||
CVE-2026-45192 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-54274 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-86597 | Medium | snowflake-connector-python | 4.7.1 | ||
GHSA-2mjx-qc3c-rqvc | Medium | rustls | 0.23.37 | ||
CVE-2026-49844 | Medium | log4j-api | 2.25.3 | ||
GHSA-8423-8fgw-73vq | Medium | tornado | 6.5.5 | ||
CVE-2026-34993 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-59889 | Medium | jackson-databind | 2.16.1 | ||
GHSA-pw6j-qg29-8w7f | Medium | tornado | 6.5.5 | ||
CVE-2026-44681 | Medium | authlib | 1.6.11 | ||
CVE-2026-24098 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-48892 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-54273 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-45409 | Medium | idna | 3.11 | ||
CVE-2026-40690 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-104874 | Medium | multidict | 6.7.1 | ||
CVE-2026-47265 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-34477 | Medium | log4j-core | 2.25.3 | ||
CVE-2026-46764 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-69243 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-54514 | Medium | jackson-databind | 2.16.1 | ||
CVE-2026-54278 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-111748 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-111748 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-77310 | Medium | jackson-databind | 2.16.1 | ||
GHSA-3pv8-6f4r-ffg2 | Medium | tar | 0.4.45 | ||
CVE-2026-68971 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-68076 | Medium | apache-airflow | 2.11.2 | ||
GHSA-2mjx-qc3c-rqvc | Medium | rustls | 0.23.37 | ||
CVE-2026-49296 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-102598 | Medium | werkzeug | 3.1.6 | ||
CVE-2026-46745 | Medium | apache-airflow-providers-fab | 1.5.4 | ||
CVE-2026-104874 | Medium | multidict | 6.7.1 | ||
CVE-2026-49267 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-49487 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-48726 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-69243 | Medium | aiohttp | 3.13.3 | ||
CVE-2025-15367 | Medium | python-3.12 | 3.12.15-r4 | ||
CVE-2026-49264 | Medium | oauthlib | 3.3.1 | ||
CVE-2026-54278 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-59244 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-102275 | Medium | pyjwt | 2.14.0 | ||
GHSA-fp55-jw48-c537 | Medium | astral-tokio-tar | 0.6.0 | ||
CVE-2026-54273 | Medium | aiohttp | 3.13.4 | ||
GHSA-4gg8-gxpx-9rph | Medium | uv | 0.11.6 | ||
GHSA-4gg8-gxpx-9rph | Medium | uv | 0.11.6 | ||
CVE-2026-48891 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-62949 | Medium | asyncssh | 2.23.1 | ||
CVE-2026-47265 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-34480 | Medium | log4j-core | 2.25.3 | ||
CVE-2026-34993 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-45409 | Medium | idna | 3.11 | ||
CVE-2026-49265 | Medium | oauthlib | 3.3.1 | ||
CVE-2026-102991 | Medium | mako | 1.3.11 | ||
GHSA-3cv2-h65g-fgmm | Medium | astral-tokio-tar | 0.6.0 | ||
CVE-2026-41018 | Medium | apache-airflow-providers-elasticsearch | 6.5.0 | ||
CVE-2026-54274 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-101918 | Medium | pyjwt | 2.14.0 | ||
GHSA-3pv8-6f4r-ffg2 | Medium | tar | 0.4.45 | ||
CVE-2026-38743 | Medium | apache-airflow | 2.11.2 | ||
GHSA-3cv2-h65g-fgmm | Medium | astral-tokio-tar | 0.6.0 | ||
CVE-2026-54276 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-18401 | Medium | jackson-core | 2.16.1 | ||
CVE-2026-68970 | Medium | apache-airflow | 2.11.2 | ||
GHSA-vfvv-c25p-m7mm | Medium | rkyv | 0.8.15 | ||
CVE-2026-59242 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-19032 | Medium | jackson-databind | 2.16.1 | ||
CVE-2026-69248 | Medium | cryptography | 46.0.7 | ||
GHSA-vfvv-c25p-m7mm | Medium | rkyv | 0.8.15 | ||
CVE-2026-59888 | Medium | jackson-databind | 2.16.1 | ||
CVE-2025-15366 | Medium | python-3.12 | 3.12.15-r4 | ||
CVE-2026-3446 | Medium | python-3.12 | 3.12.15-r4 | ||
GHSA-fp55-jw48-c537 | Medium | astral-tokio-tar | 0.6.0 | ||
GHSA-3hv7-mjh2-fv65 | Medium | tornado | 6.5.5 | ||
CVE-2026-25219 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-59881 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-42358 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-40861 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-54277 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-59881 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-42360 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-54515 | Medium | jackson-databind | 2.16.1 | ||
CVE-2026-71554 | Medium | h2 | 4.3.0 | ||
CVE-2026-111750 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-111750 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-54277 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-54183 | Medium | apache-airflow | 2.11.2 | ||
GHSA-4gg8-gxpx-9rph | Medium | uv | 0.11.6 | ||
CVE-2026-84377 | Medium | litellm | 1.84.0 | ||
CVE-2025-58065 | Medium | flask-appbuilder | 4.5.4 | ||
CVE-2025-32962 | Medium | flask-appbuilder | 4.5.4 | ||
CVE-2026-12345 | Medium | python-3.12 | 3.12.15-r4 | ||
CVE-2026-50269 | Low | aiohttp | 3.13.3 | ||
CVE-2026-111749 | Low | aiohttp | 3.13.3 | ||
CVE-2026-111749 | Low | aiohttp | 3.13.4 | ||
CVE-2026-53538 | Low | python-multipart | 0.0.26 | ||
CVE-2026-111063 | Low | aiohttp | 3.13.3 | ||
CVE-2026-111063 | Low | aiohttp | 3.13.4 | ||
GHSA-xx64-wwv2-hcqq | Low | astral-tokio-tar | 0.6.0 | ||
GHSA-965h-392x-2mh5 | Low | rustls-webpki | 0.103.10 | ||
GHSA-965h-392x-2mh5 | Low | rustls-webpki | 0.103.10 | ||
CVE-2026-44405 | Low | paramiko | 3.5.1 | ||
GHSA-xgp8-3hg3-c2mh | Low | rustls-webpki | 0.103.10 | ||
GHSA-cq8v-f236-94qc | Low | rand | 0.8.5 | ||
GHSA-wwv5-g3v4-889x | Low | tornado | 6.5.5 | ||
CVE-2026-50269 | Low | aiohttp | 3.13.4 | ||
CVE-2026-53540 | Low | python-multipart | 0.0.26 | ||
CVE-2026-54279 | Low | aiohttp | 3.13.3 | ||
GHSA-xx64-wwv2-hcqq | Low | astral-tokio-tar | 0.6.0 | ||
GHSA-cq8v-f236-94qc | Low | rand | 0.9.2 | ||
CVE-2026-54275 | Low | aiohttp | 3.13.3 | ||
GHSA-cq8v-f236-94qc | Low | rand | 0.9.2 | ||
GHSA-xgp8-3hg3-c2mh | Low | rustls-webpki | 0.103.10 | ||
CVE-2026-54280 | Low | aiohttp | 3.13.3 | ||
CVE-2026-54275 | Low | aiohttp | 3.13.4 | ||
CVE-2026-54280 | Low | aiohttp | 3.13.4 | ||
CVE-2026-53537 | Low | python-multipart | 0.0.26 | ||
GHSA-cq8v-f236-94qc | Low | rand | 0.8.5 | ||
CVE-2026-49854 | Low | tornado | 6.5.5 | ||
CVE-2026-54279 | Low | aiohttp | 3.13.4 | ||
CVE-2026-3479 | Unknown | python-3.12 | 3.12.15-r4 |
Last updated:
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.