VYPR

airflow-providers-ssh

by Apache

CVEs (1)

  • CVE-2026-111422Oct 27, 2026
    risk 0.00cvss —epss —

    In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated `environment` parameter only once, although they are placed inside an already-quoted wrapper script, so shell syntax such as `$(...)` in a value was executed on the remote SSH…