apache-airflow is a platform to programmatically author, schedule, and monitor workflows.
Affected versions of this package are vulnerable to Information Exposure. An experimental Airflow feature displayed authenticated cookies, as well as passwords to databases used by Airflow. An attacker who had limited access to airflow, could get all credentials from the system.
apache-airflow to version 1.9.0 or higher.