Vulnerabilities (CVE)

Filtered by vendor Apache Subscribe
Filtered by product Airflow Providers Databricks
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-32794 1 Apache 1 Airflow Providers Databricks 2026-04-02 N/A 4.8 MEDIUM
Improper Certificate Validation vulnerability in Apache Airflow Provider for Databricks. Provider code did not validate certificates for connections to Databricks back-end which could result in a man-of-a-middle attack that traffic is intercepted and manipulated or credentials exfiltrated w/o notice. This issue affects Apache Airflow Provider for Databricks: from 1.10.0 before 1.12.0. Users are recommended to upgrade to version 1.12.0, which fixes the issue.