CVE-2024-28423

Name of the Vulnerable Software and Affected Versions Airflow-Diagrams version 2.1.0

Description The issue is related to an arbitrary file upload vulnerability in the unsafe load function at cli.py. This allows attackers to execute arbitrary code via uploading a crafted YML file.

Recommendations For Airflow-Diagrams version 2.1.0, consider disabling the unsafe load function at cli.py until a patch is available to prevent the execution of arbitrary code. Restrict access to uploading files, especially YML files, to minimize the risk of exploitation.