CVE-2020-13927: Apache Airflow's Experimental API Authentication Bypass.
Apache Airflow's Experimental API Authentication Bypass. The previous default setting for Airflow's Experimental API was to allow all API requests without authentication.
- CISA KEV-listed (remediation due 2022-07-18)
- EPSS 94.1% (99.9% percentile)