Topic
Authorization
3 stories about Authorization that passed the news check, newest first.
Security ·
CVE-2026-111455: Apache Airflow: Connections API: async connection test authorizes create at enqueue but overwrites a later-created connection at commit
Apache Airflow 3.3.0 before 3.4.0 has CVE-2026-111455 in its Connections API.
Open Source Security
Security ·
Allowed to view the Location, handed the Device: a GraphQL permission gap in Nautobot (GHSA-mfwj-pjgx-22v2)
Nautobot's GraphQL API checked object permissions at the root of a query but not when the query traversed into related models.
DEV Community: python
Security · High impact ·
Supabase raw_user_meta_data: how a sign-up became Owner
raw_user_meta_data holds whatever the browser passes to supabase.auth.signUp().
DEV Community: backend