apache-airflow is vulnerable to remote code execution. The vulnerability exists because the library does not properly clean up the example dags
when using context manager, allowing an attacker to inject and execute malicious code on the airflow worker host.
www.openwall.com/lists/oss-security/2022/08/16/1
github.com/advisories/GHSA-746v-hfh2-xphm
github.com/apache/airflow/commit/56fd04016f1a8561f1c02e7f756bab8805c05876
github.com/apache/airflow/pull/24007
lists.apache.org/thread/614p38nf4gbk8xhvnskj9b1sqo2dknkb
www.openwall.com/lists/oss-security/2022/08/16/1