AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Apache AirflowPYSEC-2023-314

Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider

Apache Airflow

CVE-2023-25693 · Published Feb 24, 2023 · updated Jun 29, 2026

Critical9.8
Fix: upgrade to 3.1.1 or later
Source advisory

Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider.

This issue affects Apache Airflow Sqoop Provider versions before 3.1.1.

Affected versions

PackageAffectedFixed in
apache-airflow
PyPI
< 3.1.13.1.1
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
the CVSS score
Also known as
CVE-2023-25693, GHSA-j69x-v4wc-3fpf, PYSEC-2026-275

More Apache Airflow advisories

All Apache Airflow
Critical 9.8May 8, 2023Apache Airflow vulnerable to Privilege Context Switching ErrorCVE-2023-25754fixed in 2.6.0b1Medium 5.4May 8, 2023Apache Airflow vulnerable to stored Cross-site ScriptingCVE-2023-29247fixed in 2.6.0High 7.5Apr 7, 2023Apache Airflow: improper input validationCVE-2023-28707fixed in 2.3.2Medium 5.3Mar 15, 2023Sensitive Information in Error Messages in Apache AirflowCVE-2023-25695fixed in 2.5.2rc1Critical 9.8Jan 21, 2023Command Injection in Apache Airflow and Apache Airflow MySQL ProviderCVE-2023-22884fixed in 2.5.1Medium 5.5Nov 22, 2022OS Command Injection in Apache AirflowCVE-2022-40954fixed in 2.3.0