Apache Apache-airflow-providers-samba — known CVE vulnerabilities

Every CVE whose affected-product data names Apache Apache-airflow-providers-samba, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-49818 — CVSS 6.5 (medium): The Apache Airflow Samba provider's `GCSToSambaOperator` joined GCS object names to the SMB destination path without a containment check…