Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

William Ashe

#21617of 60,387
14.3Total CVSS
Vulnerabilities · 2
Medium
1
High
1
PT-2026-3231
2026-01-15
7.8
CVE-2025-68438
Apache
Apache Airflow
When rendered template fields in a Dag exceed `max templated field length`, sensitive values could be exposed in cleartext in the Rendered Templates UI. This is due to the serialization of these fields using a secrets masker instance that did not include user-registered `mask secret()` patterns, resulting in unreliable masking of secrets before truncation and display.
PT-2025-51040
2025-12-12
6.5
CVE-2025-66388
Apache
Apache Airflow
A flaw exists in Apache Airflow where authenticated users of the user interface could view secret values within rendered templates. This occurred because secrets were not properly redacted, potentially granting unauthorized access to sensitive information.