Executive brief
Apache Airflow missing Certificate Validation
Affected products
- PyPI apache-airflow-providers-smtp
- PyPI apache-airflow
- PyPI apache-airflow-providers-imap
Junglewise Threat Intelligence
CVE-2023-39441: PYSEC-2026-2368 - Apache Airflow missing Certificate Validation
CVE-2023-39441 · Severity: low · CVSS 3.1 · Published 2026-07-13
Technologies: apache-airflow (PyPI). Vendors: PyPI.
Related threats
- Apache Airflow Task SDK variable masking bypass for list-shaped values
- Apache Airflow information disclosure in audit logs
- Apache Airflow Backfill API authorization bypass via type coercion mismatch
- Apache Airflow environment-variable secrets backend team-scope bypass
- Apache Airflow arbitrary module import via deserialized callback