Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list]
Date: Sun, 07 May 2023 17:02:53 +0000
From: Pierre Jeambrun <>
Subject: CVE-2023-29247: Stored XSS on Apache Airflow 

Severity: important

Affected versions:

- Apache Airflow before 2.6.0


Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0.


taidh from VNPT - VCI (finder)
kuteminh11 (finder)


Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.