{"schema_version": "1.6.1", "id": "CVE-2022-24288", "summary": "Apache Airflow: RCE in example DAGs", "details": "In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "unspecified"}, {"fixed": "2.2.4"}]}]}], "references": [{"type": "ADVISORY", "url": "https://lists.apache.org/thread/dbw5ozcmr0h0lhs0yjph7xdc64oht23t"}]}