CVE record · 1 source
CVE-2026-107474
The Apache Airflow connections API did not mask the apprise provider's `config` connection extra, which can embed notification-service credentials.
- Vendor
- Apache Software Foundation
- Product
- Apache Airflow
- Weakness
- CWE-522
- Exposure class
- Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The Apache Airflow connections API did not mask the apprise provider's `config` connection extra, which can embed notification-service credentials.
The Apache Airflow connections API did not mask the apprise provider's `config` connection extra, which can embed notification-service credentials. A user with permission to read connections could retrieve it in cleartext…