All vulnerabilities

Servers and applications

CVE-2022-46651

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view. This vulnerability is considered low since it requires someone with access to Connection resources specifically updating the connection to exploit it. Users should upgrade to version 2.6.3 or later which has removed the…

Severity
Medium 6.5
Published
12 Jul 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.6.3
Sources
NVD

Affected software

SoftwareAffected versions
Apache AirflowServers and applications · cpe:a:apache:airflow
  • Every version before 2.6.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-46651
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-46651