{"id":"CLEANSTART-2026-SO50412","summary":"Security fixes for CVE-2025-32962, CVE-2025-58065, CVE-2026-22815, CVE-2026-25645, CVE-2026-26007, CVE-2026-27205, CVE-2026-27459, CVE-2026-30922, CVE-2026-31958, CVE-2026-32597, CVE-2026-33936, CVE-2026-34513, CVE-2026-34514, CVE-2026-34515, CVE-2026-34516, CVE-2026-34517, CVE-2026-34518, CVE-2026-34519, CVE-2026-34520, CVE-2026-34525, CVE-2026-35536, CVE-2026-39892, CVE-2026-41066, CVE-2026-41205, CVE-2026-41425, CVE-2026-42561, CVE-2026-44307, CVE-2026-44431, CVE-2026-44432, CVE-2026-44503, CVE-2026-44681, CVE-2026-45309, CVE-2026-4539, CVE-2026-45409, CVE-2026-48522, CVE-2026-48523, CVE-2026-48524, CVE-2026-48525, CVE-2026-48526, CVE-2026-8838, ghsa-78cv-mqj4-43f7, ghsa-7j59-v9qr-6fq9 applied in versions: 2.11.0-r2, 2.11.2-r1, 2.11.2-r2, 2.11.2-r3","details":"Multiple security vulnerabilities affect the airflow-2 package. These issues are resolved in later releases. See references for individual vulnerability details.","modified":"2026-09-09T12:01:20.479045477Z","published":"2026-07-09T09:50:49.900519Z","withdrawn":"2026-09-09T10:55:12Z","upstream":["CVE-2025-32962","CVE-2025-58065","CVE-2026-22815","CVE-2026-25645","CVE-2026-26007","CVE-2026-27205","CVE-2026-27459","CVE-2026-30922","CVE-2026-31958","CVE-2026-32597","CVE-2026-33936","CVE-2026-34513","CVE-2026-34514","CVE-2026-34515","CVE-2026-34516","CVE-2026-34517","CVE-2026-34518","CVE-2026-34519","CVE-2026-34520","CVE-2026-34525","CVE-2026-35536","CVE-2026-39892","CVE-2026-41066","CVE-2026-41205","CVE-2026-41425","CVE-2026-42561","CVE-2026-44307","CVE-2026-44431","CVE-2026-44432","CVE-2026-44503","CVE-2026-44681","CVE-2026-45309","CVE-2026-4539","CVE-2026-45409","CVE-2026-48522","CVE-2026-48523","CVE-2026-48524","CVE-2026-48525","CVE-2026-48526","CVE-2026-8838","ghsa-78cv-mqj4-43f7","ghsa-7j59-v9qr-6fq9"],"database_specific":{},"references":[{"type":"ADVISORY","url":"https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SO50412.json"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2025-32962"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2025-58065"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-22815"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-25645"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-26007"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-27205"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-27459"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-30922"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-31958"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-32597"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-33936"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-34513"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-34514"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-34515"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-34516"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-34517"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-34518"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-34519"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-34520"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-34525"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-35536"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-39892"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-41066"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-41205"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-41425"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-42561"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-44307"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-44431"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-44432"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-44503"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-44681"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-45309"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-4539"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-45409"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-48522"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-48523"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-48524"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-48525"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-48526"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-8838"},{"type":"WEB","url":"https://osv.dev/vulnerability/ghsa-78cv-mqj4-43f7"},{"type":"WEB","url":"https://osv.dev/vulnerability/ghsa-7j59-v9qr-6fq9"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32962"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58065"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22815"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25645"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-26007"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27205"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27459"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-30922"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31958"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32597"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33936"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34513"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34514"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34515"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34516"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34517"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34518"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34519"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34520"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34525"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35536"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39892"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41066"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41205"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41425"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42561"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44307"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44431"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44432"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44503"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44681"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45309"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4539"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45409"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48522"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48523"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48524"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48525"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48526"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8838"}],"affected":[{"package":{"name":"airflow-2","ecosystem":"CleanStart"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11.2-r3"}]}],"database_specific":{"source":"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-SO50412.json"}}],"schema_version":"1.9.0"}