Known Vulnerabilities for Apache-airflow-providers-keycloak by Apache
Listed below are 3 of the newest known vulnerabilities associated with "Apache-airflow-providers-keycloak" by "Apache".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-96806 json | The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token, but... | Not Provided | 2026-10-15 | 2026-10-16 |
| CVE-2026-92228 json | The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`) granted every team role global re... | Not Provided | 2026-10-15 | 2026-10-16 |
| CVE-2026-86467 json | Apache Airflow Amazon provider: the AWS auth manager's SAML login flow does not bind the authentication response to the brows... | Not Provided | 2026-10-20 | 2026-10-29 |
| CVE-2026-76187 json | Apache Airflow Keycloak provider: the unauthenticated token endpoint accepts a client-credentials grant for any confidential ... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-76186 json | Apache Airflow Keycloak provider: from Airflow 3.3 the Keycloak auth manager takes a user's identity from the signed Airflow ... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-40948 json | Not Provided | 2026-04-18 | 2026-10-25 |