2.1.1

DATE	CVE	VULNERABILITY TITLE	RISK
2021-08-16	CVE-2021-35936	Missing Authentication for Critical Function vulnerability in Apache Airflow If remote logging is not used, the worker (in the case of CeleryExecutor) or the scheduler (in the case of LocalExecutor) runs a Flask logging server and is listening on a specific port and also binds on 0.0.0.0 by default. network low complexity apache CWE-306	5.3