CVE-2020-13927 1

CVE-2020-13927: Apache Airflow's Experimental API Authentication Bypass

Known Exploited Vulnerabilities CISA KEV Catalog Jan 18, 2022

The previous default setting for Airflow's Experimental API was to allow all API requests without authentication.

Vulnerabilities & Patching