Junglewise Threat Intelligence

CVE-2023-25956: PYSEC-2026-771 - Apache Airflow AWS Provider Generates Error Message Containing Sensitive Information

CVE-2023-25956 · Severity: low · CVSS 3.1 · Published 2026-07-07

Technologies: apache-airflow-providers-amazon (PyPI). Vendors: PyPI.

Executive brief

Apache Airflow AWS Provider Generates Error Message Containing Sensitive Information

Affected products

PyPI apache-airflow-providers-amazon

Related threats

PYSEC-2026-3713 - The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team-scoped Connection o
Apache Airflow Amazon provider incorrect authorization in secrets backends
Apache Airflow AWS Auth Manager SAML authentication bypass