Executive brief
Apache Airflow Google Provider Improper Input Validation vulnerability
Affected products
- PyPI apache-airflow-providers-google
Junglewise Threat Intelligence
CVE-2023-25691: PYSEC-2026-277 - Apache Airflow Google Provider Improper Input Validation vulnerability
CVE-2023-25691 · Severity: low · CVSS 3.1 · Published 2026-06-29
Vendors: PyPI.
Related threats
- PYSEC-2026-3714 - The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections
- PYSEC-2026-774 - Apache Airflow Google Provider Improper Input Validation vulnerability
- Apache Airflow Google Provider path traversal in GCS operators
- Apache Airflow Google Provider disabled SSH host-key verification in ComputeEngineSSHHook