CVE-2022-46421: Apache Apache-Airflow-Providers-Apache-Hive

Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 5.0.0.

Affected products

• Apache Apache-Airflow-Providers-Apache-Hive: before 5.0.0 (fixed in 5.0.0)

Published 2022-12-20. Last modified 2026-06-17.