TI-2025-34221 CVE-2025-54415
dag-factory's CI/CD Workflow Allows for Repository Takeover and Secret Exfiltration
Priority HIGH 80
dag-factory is a library for Apache Airflow® to construct DAGs declaratively via configuration files.
No astronomer vulnerabilities are listed in CISA KEV.
1 record
dag-factory is a library for Apache Airflow® to construct DAGs declaratively via configuration files.