[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fiE8VjTn6E1flaopwA9QSMUT0ZjLWg_-cHcQmS7u8UF4":3,"g5a-ex:apache\u002Fairflow_cncf_kubernetes@*":85,"g5a-family:apache\u002Fairflow_cncf_kubernetes":87},{"success":4,"data":5},true,{"product":6,"versions":36,"topVulnerabilitiesByEpss":47,"kevVulnerabilities":62,"seoMetadata":63,"meta":82},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":35},"apache","airflow_cncf_kubernetes",10,2,0,"2024-01-24",[14,17,19,21,23,25,27,29,31,33],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"5.0.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"5.1.0",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"5.1.1",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"5.2.0",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"5.2.1",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"5.2.2",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"5.3.0",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"6.0.0",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"6.1.0",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"7.0.0","Airflow Cncf Kubernetes by Apache is a technology product with 10 tracked versions and 2 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[37,38,39,40,41,42,43,44,45,46],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},[48,56],{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":53,"severity":54,"isKev":16,"epssScore":55},"CVE-2023-33234","Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow connection.\n\nIn order to exploit this weakness, a user would already need elevated permissions (Op or Admin) to change the connection object in this manner.  Operators should upgrade to provider version 7.0.0 which has removed the vulnerability.\n\n","2023-05-30",7.2,"v3.1","High",0.01531,{"cveId":57,"description":58,"publishedDate":12,"cvssScore":59,"cvssVersion":53,"severity":60,"isKev":16,"epssScore":61},"CVE-2023-51702","Since version 5.2.0, when using deferrable mode with the path of a Kubernetes configuration file for authentication, the Airflow worker serializes this configuration file as a dictionary and sends it to the triggerer by storing it in metadata without any encryption. Additionally, if used with an Airflow version between 2.3.0 and 2.6.0, the configuration dictionary will be logged as plain text in the triggerer service without masking. This allows anyone with access to the metadata or triggerer log to obtain the configuration file and use it to access the Kubernetes cluster.\n\nThis behavior was changed in version 7.0.0, which stopped serializing the file contents and started providing the file path instead to read the contents into the trigger. Users are recommended to upgrade to version 7.0.0, which fixes this issue.",6.5,"Medium",0.00381,[],{"title":64,"metaDescription":65,"keywords":66,"structuredData":67},"Airflow Cncf Kubernetes by Apache - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Airflow Cncf Kubernetes by Apache covering 10 versions with 2 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Airflow Cncf Kubernetes vulnerabilities, Airflow Cncf Kubernetes security, Airflow Cncf Kubernetes CVE, Apache Airflow Cncf Kubernetes, Airflow Cncf Kubernetes threat intelligence, Apache security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":68,"@type":69,"name":70,"description":65,"url":71,"manufacturer":72,"applicationCategory":76,"softwareVersion":77,"mainEntity":78},"https:\u002F\u002Fschema.org","SoftwareApplication","Airflow Cncf Kubernetes","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapache\u002Fairflow_cncf_kubernetes",{"@type":73,"name":74,"url":75},"Organization","Apache","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fapache","Security Software","10 versions tracked",{"@type":79,"name":80,"description":81,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Airflow Cncf Kubernetes Security Vulnerabilities","Security vulnerabilities affecting Airflow Cncf Kubernetes by Apache",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":83,"apiVersion":84},"2026-10-28T13:45:51.338Z","3.0",{"rows":86,"total":11,"capped":16,"failed":11},[],[]]