Apache Airflow's authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and TaskInstance record
Moderate severity
GitHub Reviewed
Published
Apr 24, 2026
to the GitHub Advisory Database
•
Updated May 5, 2026
Give feedback on Dependabot alerts