apache-airflow-providers-mysql vulnerabilities
CVEs whose affected-version data names the apache-airflow-providers-mysql package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-27018Medium· 6.3Apache Airflow MySQL Provider is Vulnerable to SQL Injection
Apache Airflow MySQL Provider is Vulnerable to SQL Injection
▾ Sunlitapache-airflow-providers-mysql · apache-airflow-providers-mysqlEPSS 0.91%via OSV
CVE-2023-22884Critical· 9.8PoCCommand Injection in Apache Airflow and Apache Airflow MySQL Provider
Command Injection in Apache Airflow and Apache Airflow MySQL Provider
▾ Abyssalapache-airflow · apache-airflowEPSS 11%via OSV