Apache Airflow Hive Provider
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_airflow_hive_provider:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Airflow Hive Provider (02d601ed-dd02-5138-829c-0bab65e8bcbb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-28706 |
vulnerable | 2026-06-08 06:02:35.132204 |
Apache Airflow Hive Provider Beeline Remote Command Execution
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 6.0.0.
Published: 2023-04-07T14:54:37.177Z
Updated: 2024-10-22T15:31:35.270Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25696 |
vulnerable | 2026-06-08 05:56:09.656786 |
Apache Airflow Hive Provider Beeline RCE
Improper Input Validation vulnerability in the Apache Airflow Hive Provider.
This issue affects Apache Airflow Hive Provider versions before 5.1.3.
Published: 2023-02-24T11:48:21.189Z
Updated: 2024-10-23T19:10:47.536Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46421 |
vulnerable | 2026-06-08 05:50:38.878665 |
Apache Airflow Hive Provider: Hive Provider RCE vulnerability with hive_cli_params
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 5.0.0.
Published: 2022-12-20T10:20:39.431Z
Updated: 2025-04-16T18:10:28.787Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41131 |
vulnerable | 2026-06-08 05:48:29.911616 |
Apache Airflow Hive Provider vulnerability (command injection via hive_cli connection)
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider versions prior to 4.1.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case HIve Provider is installed (Hive Provider 4.1.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the HIve Provider version 4.1.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version that has lower version of the Hive Provider installed).
Published: 2022-11-22T00:00:00.000Z
Updated: 2025-04-29T15:11:16.156Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.