apache-airflow
condav2.11.1Airflow is a platform to programmatically author, schedule and monitor workflows
License Apache-2.0permissive66 versions1 maintainers0 deps3,271 weekly dl
apache/airflow60
/ 100
Health
do not use
apache-airflow has critical vulnerabilities — do not use
Update to >= 3.2.0 to fix known vulnerabilities
- 1 high severity vulnerabilities
- 1 critical vulnerabilities
Health breakdown0 – 100
25/25
maintenance
6/20
popularity
4/25
security
15/15
maturity
10/15
community
Vulnerabilities
5
1 critical1 high3 medium
Advisories (5)
| Severity | ID | Summary | Fixed in |
|---|---|---|---|
| medium | BIT-airflow-2026-25219 | Apache Airlfow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access | 3.1.8 |
| medium | BIT-airflow-2026-24098 | Apache Airflow UI Exposes DAG Import Errors to Unauthorized Authenticated Users | 3.1.7 |
| critical | BIT-airflow-2023-22884 | Command Injection in Apache Airflow and Apache Airflow MySQL Provider | 4.0.0 |
| medium | BIT-airflow-2025-66236 | Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI | 3.2.0 |
| high | BIT-airflow-2025-54550 | Apache Airflow: RCE by race condition in example_xcom dag | 3.2.0 |
Health History
Dependency Tree
License Audit
API access
Get this data programmatically — free, no authentication.
curl https://depscope.dev/api/check/conda/apache-airflowFirst published · 2021-02-16 09:20:57.703000+00:00
Last updated · 2026-04-16 14:01:52.087000+00:00