critical9.8
CVE-2023-25691
Improper Input Validation vulnerability in the Apache Airflow Google Provider.
Impact
Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google Provider versions before 8.10.0.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | apache-airflow-providers-google | < 8.10.0 | 8.10.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Apache-Airflow-Providers-Google | before 8.10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-8g23-2q5p-8866
- https://nvd.nist.gov/vuln/detail/CVE-2023-25691
- https://github.com/apache/airflow/pull/29497
- https://lists.apache.org/thread/zdr8ovfttbh7kj0lydgcw88tbt2nmkcy
- https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow-providers-google/PYSEC-2026-277.yaml
- https://pypi.org/project/apache-airflow-providers-google