CGA-p9q7-2f52-g93c

Published

Last updated

https://images.chainguard.dev/security/CGA-p9q7-2f52-g93c

Package

airflow-3

RepositoryWolfi

Latest Update

Pending upstream fix

Aliases

Severity

8.0

High

CVSS V3

References

Updates

Status

Pending upstream fix

Impact

We are currently unable to bump the Werkzeug dependency as there are some hard constraints on the connnexion dependency for the FAB auth manager APIs. More information can be found in a comment by upstream maintainers here: https://github.com/apache/airflow/pull/51681\#issuecomment-3411116656

Status

Under investigation

Status

Fixed

Fixed version

3.0.1-r1

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™