{ "document": { "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en-US", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Stackable GmbH and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "product-security@stackable.tech", "issuing_authority": "The Stackable Security Team is responsible for vulnerability handling across all Stackable offerings.", "name": "Stackable GmbH", "namespace": "https://www.stackable.tech/" }, "title": "Stackable Security Advisory for: CVE-2026-8838", "tracking": { "current_release_date": "2026-07-13T09:49:21.375076Z", "generator": { "engine": { "name": "SecObserve", "version": "1.54.0" } }, "id": "CVE-2026-8838", "initial_release_date": "2026-07-13T09:49:21.375076Z", "revision_history": [ { "date": "2026-07-13T09:49:21.375076Z", "number": "1", "summary": "Initial release" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "2.9.3-stackable26.3.0-amd64", "product": { "name": "airflow:2.9.3-stackable26.3.0-amd64", "product_id": "pkg:oci/airflow@sha256%3A43dd982f269f57c7eea96d365a95d5a884e5e885ae947b59d3f4df330caab095?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:43dd982f269f57c7eea96d365a95d5a884e5e885ae947b59d3f4df330caab095?arch=amd64&repository_url=oci.stackable.tech/sdp/airflow" } } }, { "category": "product_version", "name": "3.0.6-stackable26.3.0-amd64", "product": { "name": "airflow:3.0.6-stackable26.3.0-amd64", "product_id": "pkg:oci/airflow@sha256%3A413100ba2cb4db0d44057b3caf3bc8326ee40d9b3dd949ec289e5dc5f85ca7d9?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:413100ba2cb4db0d44057b3caf3bc8326ee40d9b3dd949ec289e5dc5f85ca7d9?arch=amd64&repository_url=oci.stackable.tech/sdp/airflow" } } }, { "category": "product_version", "name": "3.1.6-stackable26.3.0-amd64", "product": { "name": "airflow:3.1.6-stackable26.3.0-amd64", "product_id": "pkg:oci/airflow@sha256%3A97d12e5a214c94ed8606cff7a859c79a8922120244e8dc899c8581a343615ff5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:97d12e5a214c94ed8606cff7a859c79a8922120244e8dc899c8581a343615ff5?arch=amd64&repository_url=oci.stackable.tech/sdp/airflow" } } }, { "category": "product_version", "name": "2.10.5-stackable25.11.0-amd64", "product": { "name": "airflow:2.10.5-stackable25.11.0-amd64", "product_id": "pkg:oci/airflow@sha256%3A841ecc5ba79b7ea7f56e0e1e82c22953a02fce9de442245e96cf5c3113d02319?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:841ecc5ba79b7ea7f56e0e1e82c22953a02fce9de442245e96cf5c3113d02319?arch=amd64&repository_url=oci.stackable.tech/sdp/airflow" } } }, { "category": "product_version", "name": "2.9.3-stackable25.11.0-amd64", "product": { "name": "airflow:2.9.3-stackable25.11.0-amd64", "product_id": "pkg:oci/airflow@sha256%3A69418fa00249dbb8dbca252384b6683575f0cb957b2cc9e56d01b5e96f848f94?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:69418fa00249dbb8dbca252384b6683575f0cb957b2cc9e56d01b5e96f848f94?arch=amd64&repository_url=oci.stackable.tech/sdp/airflow" } } }, { "category": "product_version", "name": "3.0.1-stackable25.11.0-amd64", "product": { "name": "airflow:3.0.1-stackable25.11.0-amd64", "product_id": "pkg:oci/airflow@sha256%3Abac4a703fceeec87fee04e92da8feb8d7fd922f151186ee8c6b14c9444190f2d?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:bac4a703fceeec87fee04e92da8feb8d7fd922f151186ee8c6b14c9444190f2d?arch=amd64&repository_url=oci.stackable.tech/sdp/airflow" } } }, { "category": "product_version", "name": "3.0.6-stackable25.11.0-amd64", "product": { "name": "airflow:3.0.6-stackable25.11.0-amd64", "product_id": "pkg:oci/airflow@sha256%3A6d4b45a99cc85a574611af243edcf31e367ac4e3e437d49f02987fe1a80b0e36?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:6d4b45a99cc85a574611af243edcf31e367ac4e3e437d49f02987fe1a80b0e36?arch=amd64&repository_url=oci.stackable.tech/sdp/airflow" } } } ], "category": "product_name", "name": "airflow" } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "2.9.3-stackable26.3.0-arm64", "product": { "name": "airflow:2.9.3-stackable26.3.0-arm64", "product_id": "pkg:oci/airflow@sha256%3Aa4fce8ec3d44f9fa08e7c2dd5ee31e8df33af4b986366ab99b85db61e49f9827?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:a4fce8ec3d44f9fa08e7c2dd5ee31e8df33af4b986366ab99b85db61e49f9827?arch=arm64&repository_url=oci.stackable.tech/sdp/airflow" } } }, { "category": "product_version", "name": "3.0.6-stackable26.3.0-arm64", "product": { "name": "airflow:3.0.6-stackable26.3.0-arm64", "product_id": "pkg:oci/airflow@sha256%3Ab76c7375a627636e13db6ac41147805172db85464e366e6fafd8c20e6a7e3046?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:b76c7375a627636e13db6ac41147805172db85464e366e6fafd8c20e6a7e3046?arch=arm64&repository_url=oci.stackable.tech/sdp/airflow" } } }, { "category": "product_version", "name": "3.1.6-stackable26.3.0-arm64", "product": { "name": "airflow:3.1.6-stackable26.3.0-arm64", "product_id": "pkg:oci/airflow@sha256%3Ae7949e338f28d85e51c70b1319a11ae545516dcf0eb75ca757fd69bf16e4590e?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:e7949e338f28d85e51c70b1319a11ae545516dcf0eb75ca757fd69bf16e4590e?arch=arm64&repository_url=oci.stackable.tech/sdp/airflow" } } }, { "category": "product_version", "name": "2.10.5-stackable25.11.0-arm64", "product": { "name": "airflow:2.10.5-stackable25.11.0-arm64", "product_id": "pkg:oci/airflow@sha256%3A67afba16392059c63d3a336ec9c82b8084fc5ae52698ceca17dd5c55cca48ae3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:67afba16392059c63d3a336ec9c82b8084fc5ae52698ceca17dd5c55cca48ae3?arch=arm64&repository_url=oci.stackable.tech/sdp/airflow" } } }, { "category": "product_version", "name": "2.9.3-stackable25.11.0-arm64", "product": { "name": "airflow:2.9.3-stackable25.11.0-arm64", "product_id": "pkg:oci/airflow@sha256%3Acd1ed8194b60d870b3aca53e053dc12515e01ff37c7c3e52904184c724b30e36?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:cd1ed8194b60d870b3aca53e053dc12515e01ff37c7c3e52904184c724b30e36?arch=arm64&repository_url=oci.stackable.tech/sdp/airflow" } } }, { "category": "product_version", "name": "3.0.1-stackable25.11.0-arm64", "product": { "name": "airflow:3.0.1-stackable25.11.0-arm64", "product_id": "pkg:oci/airflow@sha256%3Ae1228b2b5b67ef0aaa6331764acc9d786e65475ea5429a459758d6590104367b?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:e1228b2b5b67ef0aaa6331764acc9d786e65475ea5429a459758d6590104367b?arch=arm64&repository_url=oci.stackable.tech/sdp/airflow" } } }, { "category": "product_version", "name": "3.0.6-stackable25.11.0-arm64", "product": { "name": "airflow:3.0.6-stackable25.11.0-arm64", "product_id": "pkg:oci/airflow@sha256%3Ac232050f870ec81f1af449e0db34e5b1b515fea9c23adfb9f71156b130bffcb3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:c232050f870ec81f1af449e0db34e5b1b515fea9c23adfb9f71156b130bffcb3?arch=arm64&repository_url=oci.stackable.tech/sdp/airflow" } } } ], "category": "product_name", "name": "airflow" } ], "category": "architecture", "name": "arm64" } ], "category": "vendor", "name": "Stackable" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "2.1.2", "product": { "name": "redshift-connector:2.1.2", "product_id": "pkg:pypi/redshift-connector@2.1.2", "product_identification_helper": { "purl": "pkg:pypi/redshift-connector@2.1.2" } } }, { "category": "product_version", "name": "2.1.8", "product": { "name": "redshift-connector:2.1.8", "product_id": "pkg:pypi/redshift-connector@2.1.8", "product_identification_helper": { "purl": "pkg:pypi/redshift-connector@2.1.8" } } }, { "category": "product_version", "name": "2.1.7", "product": { "name": "redshift-connector:2.1.7", "product_id": "pkg:pypi/redshift-connector@2.1.7", "product_identification_helper": { "purl": "pkg:pypi/redshift-connector@2.1.7" } } }, { "category": "product_version", "name": "2.1.5", "product": { "name": "redshift-connector:2.1.5", "product_id": "pkg:pypi/redshift-connector@2.1.5", "product_identification_helper": { "purl": "pkg:pypi/redshift-connector@2.1.5" } } }, { "category": "product_version", "name": "2.1.6", "product": { "name": "redshift-connector:2.1.6", "product_id": "pkg:pypi/redshift-connector@2.1.6", "product_identification_helper": { "purl": "pkg:pypi/redshift-connector@2.1.6" } } } ], "category": "product_name", "name": "redshift-connector" } ], "category": "vendor", "name": "unknown" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/redshift-connector@2.1.2@pkg:oci/airflow@sha256%3A43dd982f269f57c7eea96d365a95d5a884e5e885ae947b59d3f4df330caab095?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/redshift-connector@2.1.2@pkg:oci/airflow@sha256%3A43dd982f269f57c7eea96d365a95d5a884e5e885ae947b59d3f4df330caab095?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/redshift-connector@2.1.2", "relates_to_product_reference": "pkg:oci/airflow@sha256%3A43dd982f269f57c7eea96d365a95d5a884e5e885ae947b59d3f4df330caab095?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/redshift-connector@2.1.8@pkg:oci/airflow@sha256%3A413100ba2cb4db0d44057b3caf3bc8326ee40d9b3dd949ec289e5dc5f85ca7d9?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/redshift-connector@2.1.8@pkg:oci/airflow@sha256%3A413100ba2cb4db0d44057b3caf3bc8326ee40d9b3dd949ec289e5dc5f85ca7d9?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/redshift-connector@2.1.8", "relates_to_product_reference": "pkg:oci/airflow@sha256%3A413100ba2cb4db0d44057b3caf3bc8326ee40d9b3dd949ec289e5dc5f85ca7d9?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/redshift-connector@2.1.7@pkg:oci/airflow@sha256%3A97d12e5a214c94ed8606cff7a859c79a8922120244e8dc899c8581a343615ff5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/redshift-connector@2.1.7@pkg:oci/airflow@sha256%3A97d12e5a214c94ed8606cff7a859c79a8922120244e8dc899c8581a343615ff5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/redshift-connector@2.1.7", "relates_to_product_reference": "pkg:oci/airflow@sha256%3A97d12e5a214c94ed8606cff7a859c79a8922120244e8dc899c8581a343615ff5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/redshift-connector@2.1.2@pkg:oci/airflow@sha256%3Aa4fce8ec3d44f9fa08e7c2dd5ee31e8df33af4b986366ab99b85db61e49f9827?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/redshift-connector@2.1.2@pkg:oci/airflow@sha256%3Aa4fce8ec3d44f9fa08e7c2dd5ee31e8df33af4b986366ab99b85db61e49f9827?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/redshift-connector@2.1.2", "relates_to_product_reference": "pkg:oci/airflow@sha256%3Aa4fce8ec3d44f9fa08e7c2dd5ee31e8df33af4b986366ab99b85db61e49f9827?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/redshift-connector@2.1.8@pkg:oci/airflow@sha256%3Ab76c7375a627636e13db6ac41147805172db85464e366e6fafd8c20e6a7e3046?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/redshift-connector@2.1.8@pkg:oci/airflow@sha256%3Ab76c7375a627636e13db6ac41147805172db85464e366e6fafd8c20e6a7e3046?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/redshift-connector@2.1.8", "relates_to_product_reference": "pkg:oci/airflow@sha256%3Ab76c7375a627636e13db6ac41147805172db85464e366e6fafd8c20e6a7e3046?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/redshift-connector@2.1.7@pkg:oci/airflow@sha256%3Ae7949e338f28d85e51c70b1319a11ae545516dcf0eb75ca757fd69bf16e4590e?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/redshift-connector@2.1.7@pkg:oci/airflow@sha256%3Ae7949e338f28d85e51c70b1319a11ae545516dcf0eb75ca757fd69bf16e4590e?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/redshift-connector@2.1.7", "relates_to_product_reference": "pkg:oci/airflow@sha256%3Ae7949e338f28d85e51c70b1319a11ae545516dcf0eb75ca757fd69bf16e4590e?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/redshift-connector@2.1.5@pkg:oci/airflow@sha256%3A841ecc5ba79b7ea7f56e0e1e82c22953a02fce9de442245e96cf5c3113d02319?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/redshift-connector@2.1.5@pkg:oci/airflow@sha256%3A841ecc5ba79b7ea7f56e0e1e82c22953a02fce9de442245e96cf5c3113d02319?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/redshift-connector@2.1.5", "relates_to_product_reference": "pkg:oci/airflow@sha256%3A841ecc5ba79b7ea7f56e0e1e82c22953a02fce9de442245e96cf5c3113d02319?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/redshift-connector@2.1.2@pkg:oci/airflow@sha256%3A69418fa00249dbb8dbca252384b6683575f0cb957b2cc9e56d01b5e96f848f94?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/redshift-connector@2.1.2@pkg:oci/airflow@sha256%3A69418fa00249dbb8dbca252384b6683575f0cb957b2cc9e56d01b5e96f848f94?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/redshift-connector@2.1.2", "relates_to_product_reference": "pkg:oci/airflow@sha256%3A69418fa00249dbb8dbca252384b6683575f0cb957b2cc9e56d01b5e96f848f94?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/redshift-connector@2.1.6@pkg:oci/airflow@sha256%3Abac4a703fceeec87fee04e92da8feb8d7fd922f151186ee8c6b14c9444190f2d?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/redshift-connector@2.1.6@pkg:oci/airflow@sha256%3Abac4a703fceeec87fee04e92da8feb8d7fd922f151186ee8c6b14c9444190f2d?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/redshift-connector@2.1.6", "relates_to_product_reference": "pkg:oci/airflow@sha256%3Abac4a703fceeec87fee04e92da8feb8d7fd922f151186ee8c6b14c9444190f2d?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/redshift-connector@2.1.8@pkg:oci/airflow@sha256%3A6d4b45a99cc85a574611af243edcf31e367ac4e3e437d49f02987fe1a80b0e36?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/redshift-connector@2.1.8@pkg:oci/airflow@sha256%3A6d4b45a99cc85a574611af243edcf31e367ac4e3e437d49f02987fe1a80b0e36?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/redshift-connector@2.1.8", "relates_to_product_reference": "pkg:oci/airflow@sha256%3A6d4b45a99cc85a574611af243edcf31e367ac4e3e437d49f02987fe1a80b0e36?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/redshift-connector@2.1.5@pkg:oci/airflow@sha256%3A67afba16392059c63d3a336ec9c82b8084fc5ae52698ceca17dd5c55cca48ae3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/redshift-connector@2.1.5@pkg:oci/airflow@sha256%3A67afba16392059c63d3a336ec9c82b8084fc5ae52698ceca17dd5c55cca48ae3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/redshift-connector@2.1.5", "relates_to_product_reference": "pkg:oci/airflow@sha256%3A67afba16392059c63d3a336ec9c82b8084fc5ae52698ceca17dd5c55cca48ae3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/redshift-connector@2.1.2@pkg:oci/airflow@sha256%3Acd1ed8194b60d870b3aca53e053dc12515e01ff37c7c3e52904184c724b30e36?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/redshift-connector@2.1.2@pkg:oci/airflow@sha256%3Acd1ed8194b60d870b3aca53e053dc12515e01ff37c7c3e52904184c724b30e36?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/redshift-connector@2.1.2", "relates_to_product_reference": "pkg:oci/airflow@sha256%3Acd1ed8194b60d870b3aca53e053dc12515e01ff37c7c3e52904184c724b30e36?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/redshift-connector@2.1.6@pkg:oci/airflow@sha256%3Ae1228b2b5b67ef0aaa6331764acc9d786e65475ea5429a459758d6590104367b?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/redshift-connector@2.1.6@pkg:oci/airflow@sha256%3Ae1228b2b5b67ef0aaa6331764acc9d786e65475ea5429a459758d6590104367b?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/redshift-connector@2.1.6", "relates_to_product_reference": "pkg:oci/airflow@sha256%3Ae1228b2b5b67ef0aaa6331764acc9d786e65475ea5429a459758d6590104367b?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/redshift-connector@2.1.8@pkg:oci/airflow@sha256%3Ac232050f870ec81f1af449e0db34e5b1b515fea9c23adfb9f71156b130bffcb3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/redshift-connector@2.1.8@pkg:oci/airflow@sha256%3Ac232050f870ec81f1af449e0db34e5b1b515fea9c23adfb9f71156b130bffcb3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/redshift-connector@2.1.8", "relates_to_product_reference": "pkg:oci/airflow@sha256%3Ac232050f870ec81f1af449e0db34e5b1b515fea9c23adfb9f71156b130bffcb3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-8838", "flags": [ { "label": "vulnerable_code_cannot_be_controlled_by_adversary", "product_ids": [ "pkg:pypi/redshift-connector@2.1.2@pkg:oci/airflow@sha256%3A43dd982f269f57c7eea96d365a95d5a884e5e885ae947b59d3f4df330caab095?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/redshift-connector@2.1.8@pkg:oci/airflow@sha256%3A413100ba2cb4db0d44057b3caf3bc8326ee40d9b3dd949ec289e5dc5f85ca7d9?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/redshift-connector@2.1.7@pkg:oci/airflow@sha256%3A97d12e5a214c94ed8606cff7a859c79a8922120244e8dc899c8581a343615ff5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/redshift-connector@2.1.2@pkg:oci/airflow@sha256%3Aa4fce8ec3d44f9fa08e7c2dd5ee31e8df33af4b986366ab99b85db61e49f9827?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/redshift-connector@2.1.8@pkg:oci/airflow@sha256%3Ab76c7375a627636e13db6ac41147805172db85464e366e6fafd8c20e6a7e3046?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/redshift-connector@2.1.7@pkg:oci/airflow@sha256%3Ae7949e338f28d85e51c70b1319a11ae545516dcf0eb75ca757fd69bf16e4590e?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" ] } ], "notes": [ { "category": "description", "text": "Unsafe use of Python's eval() on server-received data in the vector_in() function in amazon-redshift-python-driver before 2.1.14 allows a rogue server or man-in-the-middle actor to execute arbitrary code on the client. \n\n\n\nTo remediate this issue, users should upgrade to version 2.1.14.", "title": "Vulnerability description" } ], "product_status": { "known_not_affected": [ "pkg:pypi/redshift-connector@2.1.2@pkg:oci/airflow@sha256%3A43dd982f269f57c7eea96d365a95d5a884e5e885ae947b59d3f4df330caab095?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/redshift-connector@2.1.8@pkg:oci/airflow@sha256%3A413100ba2cb4db0d44057b3caf3bc8326ee40d9b3dd949ec289e5dc5f85ca7d9?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/redshift-connector@2.1.7@pkg:oci/airflow@sha256%3A97d12e5a214c94ed8606cff7a859c79a8922120244e8dc899c8581a343615ff5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/redshift-connector@2.1.2@pkg:oci/airflow@sha256%3Aa4fce8ec3d44f9fa08e7c2dd5ee31e8df33af4b986366ab99b85db61e49f9827?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/redshift-connector@2.1.8@pkg:oci/airflow@sha256%3Ab76c7375a627636e13db6ac41147805172db85464e366e6fafd8c20e6a7e3046?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/redshift-connector@2.1.7@pkg:oci/airflow@sha256%3Ae7949e338f28d85e51c70b1319a11ae545516dcf0eb75ca757fd69bf16e4590e?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" ] }, "references": [ { "category": "external", "summary": "Security Advisory", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8838" } ], "threats": [ { "category": "impact", "details": "Code is reachable only when connecting to a server the deployment chose to trust. An attacker cannot control that endpoint, and default TLS verify-ca blocks the MITM path.", "product_ids": [ "pkg:pypi/redshift-connector@2.1.2@pkg:oci/airflow@sha256%3A43dd982f269f57c7eea96d365a95d5a884e5e885ae947b59d3f4df330caab095?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/redshift-connector@2.1.8@pkg:oci/airflow@sha256%3A413100ba2cb4db0d44057b3caf3bc8326ee40d9b3dd949ec289e5dc5f85ca7d9?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/redshift-connector@2.1.7@pkg:oci/airflow@sha256%3A97d12e5a214c94ed8606cff7a859c79a8922120244e8dc899c8581a343615ff5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/redshift-connector@2.1.2@pkg:oci/airflow@sha256%3Aa4fce8ec3d44f9fa08e7c2dd5ee31e8df33af4b986366ab99b85db61e49f9827?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/redshift-connector@2.1.8@pkg:oci/airflow@sha256%3Ab76c7375a627636e13db6ac41147805172db85464e366e6fafd8c20e6a7e3046?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/redshift-connector@2.1.7@pkg:oci/airflow@sha256%3Ae7949e338f28d85e51c70b1319a11ae545516dcf0eb75ca757fd69bf16e4590e?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" ] } ], "title": "CVE-2026-8838" } ] }