What’s Vulnerable › Products

Apache Software Foundation Apache Airflow FTP provider vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Apache Software Foundation Apache Airflow FTP provider version is affected

Latest Apache Software Foundation Apache Airflow FTP provider vulnerabilities

• CVE-2026-49486 — Apache Airflow FTP provider: FTP Provider does not protect FTPS data channel (missing PROT_P) (CVSS 7.5)
• CVE-2024-29733 — Apache Airflow FTP Provider: FTP_TLS instance with unverified SSL context (CVSS 2.7)