airflow-iamguardedpackaged by Chainguard
packaged by Chainguard
Last changed
Request a free trial
Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.
Tag:
Severity:All
Expand | CVE ID | Severity | Package | Version | Last detected |
|---|---|---|---|---|---|
CVE-2026-33264 | Critical | apache-airflow | 2.11.2 | ||
CVE-2026-8838 | Critical | redshift-connector | 2.1.12 | ||
CVE-2019-1010022 | Critical | glibc-2.44 | 2.44-r7 | ||
CVE-2026-50203 | Critical | apache-airflow-providers-sftp | 5.7.0 | ||
CVE-2026-40961 | High | apache-airflow | 2.11.2 | ||
CVE-2025-54550 | High | apache-airflow | 2.11.2 | ||
CVE-2026-25087 | High | pyarrow | 22.0.0 | ||
CVE-2026-38753 | High | busybox | 1.38.0-r2 | ||
CVE-2026-49853 | High | tornado | 6.5.5 | ||
CVE-2024-23342 | High | ecdsa | 0.19.2 | ||
CVE-2026-104851 | High | fsspec | 2026.2.0 | ||
GHSA-82j2-j2ch-gfr8 | High | rustls-webpki | 0.103.10 | ||
GHSA-4w2j-m93h-cj5j | High | quinn-proto | 0.11.14 | ||
GHSA-chx6-46f5-w4vp | High | tornado | 6.5.5 | ||
CVE-2026-41066 | High | lxml | 5.4.0 | ||
GHSA-4w2j-m93h-cj5j | High | quinn-proto | 0.11.14 | ||
CVE-2026-59885 | High | pyasn1 | 0.6.3 | ||
CVE-2026-44307 | High | mako | 1.3.11 | ||
CVE-2026-49855 | High | tornado | 6.5.5 | ||
CVE-2026-91777 | High | jackson-databind | 2.16.1 | ||
CVE-2026-69244 | High | aiohttp | 3.13.4 | ||
CVE-2019-1010023 | High | glibc-2.44 | 2.44-r7 | ||
CVE-2026-41486 | High | ray | 2.54.0 | ||
CVE-2026-69244 | High | aiohttp | 3.13.3 | ||
CVE-2026-38754 | High | busybox | 1.38.0-r2 | ||
CVE-2026-19499 | High | glibc-2.44 | 2.44-r7 | ||
CVE-2026-69249 | High | cryptography | 46.0.7 | ||
CVE-2026-91776 | High | jackson-databind | 2.16.1 | ||
CVE-2026-0861 | High | glibc-2.44 | 2.44-r7 | ||
CVE-2026-59884 | High | pyasn1 | 0.6.3 | ||
CVE-2026-68494 | High | jackson-core | 2.16.1 | ||
GHSA-c2m8-h5v5-343r | High | tornado | 6.5.5 | ||
CVE-2026-54399 | High | httpcore5 | 5.0.2 | ||
CVE-2026-68968 | High | apache-airflow | 2.11.2 | ||
CVE-2026-54513 | High | jackson-databind | 2.16.1 | ||
GHSA-537c-gmf6-5ccf | High | cryptography | 46.0.7 | ||
CVE-2026-59939 | High | httplib2 | 0.31.2 | ||
CVE-2026-89425 | High | jackson-core | 2.16.1 | ||
CVE-2026-45361 | High | apache-airflow-providers-google | 20.0.0 | ||
CVE-2026-69247 | High | cryptography | 46.0.7 | ||
CVE-2026-68497 | High | jackson-databind | 2.16.1 | ||
CVE-2026-27173 | High | apache-airflow-providers-cncf-kubernetes | 10.13.0 | ||
CVE-2026-54512 | High | jackson-databind | 2.16.1 | ||
CVE-2026-42561 | High | python-multipart | 0.0.26 | ||
GHSA-6v7p-g79w-8964 | High | msgpack | 1.1.2 | ||
CVE-2026-57516 | High | ray | 2.54.0 | ||
CVE-2026-59886 | High | pyasn1 | 0.6.3 | ||
CVE-2026-49297 | High | apache-airflow-providers-google | 20.0.0 | ||
CVE-2026-53539 | High | python-multipart | 0.0.26 | ||
CVE-2026-38755 | High | busybox | 1.38.0-r2 | ||
GHSA-82j2-j2ch-gfr8 | High | rustls-webpki | 0.103.10 | ||
CVE-2026-82397 | High | tornado | 6.5.5 | ||
CVE-2026-69243 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-49296 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-34478 | Medium | log4j-core | 2.25.3 | ||
CVE-2026-48891 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-89092 | Medium | glibc-2.44 | 2.44-r7 | ||
GHSA-8423-8fgw-73vq | Medium | tornado | 6.5.5 | ||
CVE-2026-40861 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-45192 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-34515 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-22815 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-47265 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-86805 | Medium | glibc-2.44 | 2.44-r7 | ||
CVE-2026-34516 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-54183 | Medium | apache-airflow | 2.11.2 | ||
CVE-2025-15366 | Medium | python-3.12 | 3.12.15-r0 | ||
CVE-2026-42526 | Medium | apache-airflow-providers-amazon | 9.22.0 | ||
CVE-2026-40690 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-59244 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-101918 | Medium | pyjwt | 2.14.0 | ||
CVE-2026-3446 | Medium | python-3.12 | 3.12.15-r0 | ||
CVE-2026-47265 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-49844 | Medium | log4j-api | 2.25.3 | ||
CVE-2026-59888 | Medium | jackson-databind | 2.16.1 | ||
GHSA-3pv8-6f4r-ffg2 | Medium | tar | 0.4.45 | ||
CVE-2026-45409 | Medium | idna | 3.11 | ||
CVE-2026-8674 | Medium | glibc-2.44 | 2.44-r7 | ||
CVE-2026-54273 | Medium | aiohttp | 3.13.4 | ||
CVE-2025-12781 | Medium | python-3.12 | 3.12.15-r0 | ||
CVE-2026-102991 | Medium | mako | 1.3.11 | ||
CVE-2026-49264 | Medium | oauthlib | 3.3.1 | ||
CVE-2026-49265 | Medium | oauthlib | 3.3.1 | ||
CVE-2026-46745 | Medium | apache-airflow-providers-fab | 1.5.4 | ||
CVE-2026-54277 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-84377 | Medium | litellm | 1.84.0 | ||
GHSA-fp55-jw48-c537 | Medium | astral-tokio-tar | 0.6.0 | ||
GHSA-4gg8-gxpx-9rph | Medium | uv | 0.11.6 | ||
CVE-2026-42360 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-104874 | Medium | multidict | 6.7.1 | ||
CVE-2026-54277 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-62949 | Medium | asyncssh | 2.23.1 | ||
CVE-2026-12345 | Medium | python-3.12 | 3.12.15-r0 | ||
GHSA-vfvv-c25p-m7mm | Medium | rkyv | 0.8.15 | ||
CVE-2026-48892 | Medium | apache-airflow | 2.11.2 | ||
GHSA-3cv2-h65g-fgmm | Medium | astral-tokio-tar | 0.6.0 | ||
CVE-2026-102598 | Medium | werkzeug | 3.1.6 | ||
CVE-2026-49487 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-54273 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-6019 | Medium | python-3.12 | 3.12.15-r0 | ||
GHSA-vfvv-c25p-m7mm | Medium | rkyv | 0.8.15 | ||
CVE-2026-80489 | Medium | glibc-2.44 | 2.44-r7 | ||
CVE-2026-41018 | Medium | apache-airflow-providers-elasticsearch | 6.5.0 | ||
CVE-2026-49267 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-102275 | Medium | pyjwt | 2.14.0 | ||
CVE-2026-59881 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-34480 | Medium | log4j-core | 2.25.3 | ||
CVE-2026-48828 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-38743 | Medium | apache-airflow | 2.11.2 | ||
CVE-2025-58065 | Medium | flask-appbuilder | 4.5.4 | ||
CVE-2026-54278 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-44681 | Medium | authlib | 1.6.11 | ||
CVE-2026-77310 | Medium | jackson-databind | 2.16.1 | ||
CVE-2026-59242 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-54276 | Medium | aiohttp | 3.13.3 | ||
CVE-2025-32962 | Medium | flask-appbuilder | 4.5.4 | ||
GHSA-2mjx-qc3c-rqvc | Medium | rustls | 0.23.37 | ||
GHSA-2mjx-qc3c-rqvc | Medium | rustls | 0.23.37 | ||
CVE-2026-68971 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-54278 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-34477 | Medium | log4j-core | 2.25.3 | ||
CVE-2026-86597 | Medium | snowflake-connector-python | 4.7.1 | ||
GHSA-4gg8-gxpx-9rph | Medium | uv | 0.11.6 | ||
CVE-2026-68076 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-34525 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-54514 | Medium | jackson-databind | 2.16.1 | ||
CVE-2026-54276 | Medium | aiohttp | 3.13.4 | ||
CVE-2019-1010025 | Medium | glibc-2.44 | 2.44-r7 | ||
CVE-2026-59881 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-68970 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-69248 | Medium | cryptography | 46.0.7 | ||
CVE-2026-71554 | Medium | h2 | 4.3.0 | ||
CVE-2026-83557 | Medium | jackson-databind | 2.16.1 | ||
CVE-2026-48726 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-54274 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-34993 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-18401 | Medium | jackson-core | 2.16.1 | ||
CVE-2026-54515 | Medium | jackson-databind | 2.16.1 | ||
CVE-2010-4756 | Medium | glibc-2.44 | 2.44-r7 | ||
CVE-2026-19032 | Medium | jackson-databind | 2.16.1 | ||
CVE-2026-69243 | Medium | aiohttp | 3.13.3 | ||
CVE-2026-77117 | Medium | glibc-2.44 | 2.44-r7 | ||
CVE-2026-19542 | Medium | glibc-2.44 | 2.44-r7 | ||
GHSA-3cv2-h65g-fgmm | Medium | astral-tokio-tar | 0.6.0 | ||
CVE-2026-24098 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-68969 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-25219 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-42358 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-46764 | Medium | apache-airflow | 2.11.2 | ||
CVE-2026-41016 | Medium | apache-airflow-providers-smtp | 2.4.2 | ||
CVE-2026-104874 | Medium | multidict | 6.7.1 | ||
CVE-2026-18374 | Medium | glibc-2.44 | 2.44-r7 | ||
GHSA-3pv8-6f4r-ffg2 | Medium | tar | 0.4.45 | ||
GHSA-4gg8-gxpx-9rph | Medium | uv | 0.11.6 | ||
CVE-2019-1010024 | Medium | glibc-2.44 | 2.44-r7 | ||
GHSA-pw6j-qg29-8w7f | Medium | tornado | 6.5.5 | ||
CVE-2025-15367 | Medium | python-3.12 | 3.12.15-r0 | ||
CVE-2026-54274 | Medium | aiohttp | 3.13.4 | ||
CVE-2026-34993 | Medium | aiohttp | 3.13.4 | ||
GHSA-fp55-jw48-c537 | Medium | astral-tokio-tar | 0.6.0 | ||
GHSA-3hv7-mjh2-fv65 | Medium | tornado | 6.5.5 | ||
CVE-2026-45409 | Medium | idna | 3.11 | ||
CVE-2026-54275 | Low | aiohttp | 3.13.4 | ||
CVE-2026-34514 | Low | aiohttp | 3.13.3 | ||
CVE-2026-53537 | Low | python-multipart | 0.0.26 | ||
GHSA-965h-392x-2mh5 | Low | rustls-webpki | 0.103.10 | ||
GHSA-xx64-wwv2-hcqq | Low | astral-tokio-tar | 0.6.0 | ||
GHSA-cq8v-f236-94qc | Low | rand | 0.8.5 | ||
GHSA-cq8v-f236-94qc | Low | rand | 0.8.5 | ||
CVE-2026-54275 | Low | aiohttp | 3.13.3 | ||
GHSA-cq8v-f236-94qc | Low | rand | 0.9.2 | ||
CVE-2026-54279 | Low | aiohttp | 3.13.4 | ||
CVE-2026-44405 | Low | paramiko | 3.5.1 | ||
CVE-2026-34520 | Low | aiohttp | 3.13.3 | ||
GHSA-xgp8-3hg3-c2mh | Low | rustls-webpki | 0.103.10 | ||
CVE-2026-54279 | Low | aiohttp | 3.13.3 | ||
CVE-2026-50269 | Low | aiohttp | 3.13.3 | ||
GHSA-wwv5-g3v4-889x | Low | tornado | 6.5.5 | ||
GHSA-xgp8-3hg3-c2mh | Low | rustls-webpki | 0.103.10 | ||
CVE-2026-53540 | Low | python-multipart | 0.0.26 | ||
CVE-2026-97399 | Low | glibc-2.44 | 2.44-r7 | ||
CVE-2026-95818 | Low | glibc-2.44 | 2.44-r7 | ||
GHSA-xx64-wwv2-hcqq | Low | astral-tokio-tar | 0.6.0 | ||
CVE-2026-50269 | Low | aiohttp | 3.13.4 | ||
CVE-2026-34517 | Low | aiohttp | 3.13.3 | ||
CVE-2026-34518 | Low | aiohttp | 3.13.3 | ||
CVE-2026-34519 | Low | aiohttp | 3.13.3 | ||
CVE-2026-27205 | Low | flask | 2.3.3 | ||
CVE-2026-49854 | Low | tornado | 6.5.5 | ||
GHSA-cq8v-f236-94qc | Low | rand | 0.9.2 | ||
CVE-2026-34513 | Low | aiohttp | 3.13.3 | ||
CVE-2026-54280 | Low | aiohttp | 3.13.4 | ||
GHSA-965h-392x-2mh5 | Low | rustls-webpki | 0.103.10 | ||
CVE-2026-54280 | Low | aiohttp | 3.13.3 | ||
CVE-2026-53538 | Low | python-multipart | 0.0.26 | ||
CVE-2026-3479 | Unknown | python-3.12 | 3.12.15-r0 |
Last updated:
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.