PyPI: apache-airflow

SFTY-20220427-39195

Safety legacy ID: pyup.io-48307

Apache-airflow 1.10.14 starts using a random SECRET_KEY, as it is recommended by Flask community. https://github.com/apache/airflow/commit/dfa7b26ddaca80ee8fd9915ee9f6eac50fac77f6 https://github.com/apache/airflow/commit/fe6d00a54f83468e296777d3b83b65a2ae7169ec

PythonPyPI
Created at: Nov 5, 2025Updated at: Nov 5, 2025

Overview

Apache-airflow 1.10.14 starts using a random SECRET_KEY, as it is recommended by Flask community. https://github.com/apache/airflow/commit/dfa7b26ddaca80ee8fd9915ee9f6eac50fac77f6 https://github.com/apache/airflow/commit/fe6d00a54f83468e296777d3b83b65a2ae7169ec

Advisory

Apache-airflow 1.10.14 starts using a random SECRET_KEY, as it is recommended by Flask community. https://github.com/apache/airflow/commit/dfa7b26ddaca80ee8fd9915ee9f6eac50fac77f6 https://github.com/apache/airflow/commit/fe6d00a54f83468e296777d3b83b65a2ae7169ec

Affected Package

Affecting apache-airflow package, versions<1.10.14

Also affects

---

How to Fix

Upgradeapache-airflowto1.10.14or higher.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

References

Safety

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more