Skip to content

CVE record · 1 source

CVE-2026-111395

Apache Airflow did not reject reserved serialization keys inside a Dag run's `conf`.

Vendor: Apache Software Foundation
Product: Apache Airflow
Weakness: CWE-502
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

20

CVE NVD 2h ago

Apache Airflow did not reject reserved serialization keys inside a Dag run's `conf`.

Apache Airflow did not reject reserved serialization keys inside a Dag run's `conf`. A user allowed to trigger a Dag that uses a deadline alert with an asynchronous callback could pass a `conf` that, once the deadline was missed…

CVE-2026-111395 Apache Software Foundation