News · via oss-security
CVE-2026-94135: Apache Airflow SFTP provider: Async SFTP hook disables host-key verification by default
Posted by Jarek Potiuk on Oct 15 Severity: moderate Affected versions: - Apache Airflow SFTP provider before 7.0.0 Description: The Apache Airflow SFTP provider's deferrable code paths…