PyPI: apache-airflow

SFTY-20221113-47665

Safety legacy ID: pyup.io-51848

Apache-airflow 1.10.3 sets HttpOnly flag to cookies by default. https://github.com/apache/airflow/commit/1211dddfd7167fd90575f40dd6734b0af9aec8b7

PyPI

Created at: Nov 5, 2025Updated at: Nov 5, 2025

Overview

Apache-airflow 1.10.3 sets HttpOnly flag to cookies by default. https://github.com/apache/airflow/commit/1211dddfd7167fd90575f40dd6734b0af9aec8b7

Advisory

Apache-airflow 1.10.3 sets HttpOnly flag to cookies by default. https://github.com/apache/airflow/commit/1211dddfd7167fd90575f40dd6734b0af9aec8b7

Affected Package

Affecting apache-airflow package, versions<1.10.3

Also affects

---

How to Fix

Upgradeapache-airflowto1.10.3or higher.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

References

https://getsafety.com/vulnerabilities/SFTY-20221113-47665

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more