Vulnerability in Apache Software Foundation Airflow

CVE-2025-57735

When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted. In Airflow 3.2 we implemented the mechanism that implements token invalidation at…

EPSS: 0.000 (9.1th percentile) — read the EPSS interpretation.