Skip to content
This repository was archived by the owner on Jan 7, 2026. It is now read-only.

airflow-3: update advisories #24328

Merged
catmsred merged 1 commit into from
Oct 23, 2025
Merged

airflow-3: update advisories #24328

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 24 additions & 0 deletions airflow-3.advisories.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -147,6 +147,12 @@ advisories:
componentType: python
componentLocation: /opt/airflow/lib/python3.12/site-packages/Werkzeug-2.2.3.dist-info/METADATA
scanner: grype
- timestamp: 2025-10-23T12:06:16Z
type: pending-upstream-fix
data:
note: |-
We are currently unable to bump the Werkzeug dependency as there are some hard constraints on the connnexion dependency for the FAB auth manager APIs.
More information can be found in a comment by upstream maintainers here: https://github.com/apache/airflow/pull/51681\#issuecomment-3411116656

- id: CGA-gcv3-m4w5-hfr2
aliases:
Expand Down Expand Up @@ -181,6 +187,12 @@ advisories:
componentType: python
componentLocation: /opt/airflow/lib/python3.12/site-packages/Werkzeug-2.2.3.dist-info/METADATA
scanner: grype
- timestamp: 2025-10-23T12:06:16Z
type: pending-upstream-fix
data:
note: |-
We are currently unable to bump the Werkzeug dependency as there are some hard constraints on the connnexion dependency for the FAB auth manager APIs.
More information can be found in a comment by upstream maintainers here: https://github.com/apache/airflow/pull/51681\#issuecomment-3411116656

- id: CGA-gx9p-ww82-5jv2
aliases:
Expand Down Expand Up @@ -324,6 +336,12 @@ advisories:
componentType: python
componentLocation: /opt/airflow/lib/python3.12/site-packages/Werkzeug-2.2.3.dist-info/METADATA
scanner: grype
- timestamp: 2025-10-23T12:06:16Z
type: pending-upstream-fix
data:
note: |-
We are currently unable to bump the Werkzeug dependency as there are some hard constraints on the connnexion dependency for the FAB auth manager APIs.
More information can be found in a comment by upstream maintainers here: https://github.com/apache/airflow/pull/51681\#issuecomment-3411116656

- id: CGA-pcx4-jwph-2g77
aliases:
Expand Down Expand Up @@ -425,6 +443,12 @@ advisories:
componentType: python
componentLocation: /opt/airflow/lib/python3.12/site-packages/Werkzeug-2.2.3.dist-info/METADATA
scanner: grype
- timestamp: 2025-10-23T12:06:16Z
type: pending-upstream-fix
data:
note: |-
We are currently unable to bump the Werkzeug dependency as there are some hard constraints on the connnexion dependency for the FAB auth manager APIs.
More information can be found in a comment by upstream maintainers here: https://github.com/apache/airflow/pull/51681\#issuecomment-3411116656

- id: CGA-rw79-7pm4-6wf7
aliases:
Expand Down
Loading