Apache Apache-airflow-providers-fab — known CVE vulnerabilities

Every CVE whose affected-product data names Apache Apache-airflow-providers-fab, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2024-42447 — CVSS 9.8 (critical): Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB. This issue affects Apache Airflow Providers FAB: 1.2.1 (when…
• CVE-2024-45033 — CVSS 8.1 (high): Insufficient Session Expiration vulnerability in Apache Airflow Fab Provider. This issue affects Apache Airflow Fab Provider: before 1.5.2…
• CVE-2026-46745 — CVSS 5.3 (medium): Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability (CWE-90) that allows unauthenticated attackers to…