CVE-2024-39863

Published: Jul 17, 2024
Updated: May 4, 2025
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2024-39863" target="_blank" rel="noopener"> CVE-2024-39863
GHSA: <a href="https://github.com/advisories/GHSA-j482-47xf-p25c" target="_blank" rel="noopener"> GHSA-j482-47xf-p25c
Severity: Medium
Exploit:

Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated attacker to inject a malicious link when installing a provider. Users are recommended to upgrade to version 2.9.3, which fixes this issue.