/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-3v8h-9xm6-877g

Published

Last updated

https://images.chainguard.dev/security/CGA-3v8h-9xm6-877g
Package

airflow-3

RepositoryWolfi
Latest Update
Pending upstream fix
Aliases
  • CVE-2025-62593
  • GHSA-q279-jhrf-cc6v

Severity

Unknown

References

  • https://nvd.nist.gov/vuln/detail/CVE-2025-62593

Updates

Status

Pending upstream fix

Impact

This vulnerability affects the Ray Python module. Updating Ray beyond version 2.47 currently violates Airflow’s dependency constraints. To address the issue, the upstream project will need to update its dependencies and version requirements, and upgrade Ray to version 2.52. See upstream issue: https://github.com/apache/airflow/issues/52550

Status

Under investigation


The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing