CVE-2026-31987 — 脆弱性インテリジェンス

apache — airflow

公表日: 2026-04-16T13:31:52.336Z

CVSS

7.5

CISA KEV

未掲載（悪用がないことを意味しません）

情報源の原文（翻訳ではありません）

JWT Tokens used by tasks were exposed in logs. This could allow UI users to act as Dag Authors. Users are advised to upgrade to Airflow version that contains fix. Users are recommended to upgrade to version 3.2.0, which fixes this issue.

情報源

• CVE-2026-31987
• Issue Tracking
• Issue Tracking
• Issue Tracking, Patch, Third Party Advisory
• Mailing List, Vendor Advisory
• CVE-2026-31987