CVE-2023-25691: Apache Apache-Airflow-Providers-Google

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google Provider versions before 8.10.0.

Affected products

• Apache Apache-Airflow-Providers-Google: before 8.10.0 (fixed in 8.10.0)

Published 2023-02-24. Last modified 2026-06-17.