CVE-2020-11978 Apache Airflow
A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow.
- CVSS
- not scored
On CISA’s exploited list
Apache Airflow Command Injection
- Added
- 2022-01-18
- Federal patch deadline
- 2022-07-18
- Ransomware use
- not known