APACHE AIRFLOW VULNERABILITIES ENABLE SENSITIVE DATA EXPOSURE

Summary from the TLDR InfoSec newsletter

Two new vulnerabilities allow for sensitive data leakage in versions of Apache Airflow prior to 3.16. The first vulnerability arises from Airflow failing to properly mask proxy credentials in log files. The second vulnerability arises from Airflow not applying user-registered secret pattern masking before truncating field templates when dealing with long fields in the Rendered Templates UI.