Apache Apache-airflow-providers-apache-kafka — known CVE vulnerabilities

Every CVE whose affected-product data names Apache Apache-airflow-providers-apache-kafka, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-86792 — CVSS 8.8 (high): Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's `extra` field…