Apache Airflow: versions, end of support and vulnerabilities
Release branches of Apache Airflow with the latest version, the end of support and the vulnerabilities that are still open in the latest version.
The NVD lists 159 vulnerabilities for Apache Airflow, 2 of them actively exploited. Last checked on 02/11/2026.
Release branches
Apache Airflow 3.3
Latest version: 3.3.2, released on 17/09/2026
End of support: no date known
No known vulnerability open in 3.3.2
Apache Airflow 3.2
Latest version: 3.2.2, released on 29/05/2026
End of support: 06/07/2026
16 known vulnerabilities open in 3.2.2
Apache Airflow 2
Latest version: 2.11.2, released on 14/03/2026
End of support: 22/04/2026
33 known vulnerabilities open in 2.11.2
Apache Airflow 3.1
Latest version: 3.1.8, released on 11/03/2026
End of support: 07/04/2026
44 known vulnerabilities open in 3.1.8
Apache Airflow 3.0
Latest version: 3.0.6, released on 29/08/2025
End of support: 25/09/2025
51 known vulnerabilities open in 3.0.6
Apache Airflow 1.10
Latest version: 1.10.15, released on 17/03/2021
End of support: 17/06/2021
82 known vulnerabilities open in 1.10.15
Apache Airflow 1.9
Latest version: 1.9.0, released on 02/01/2018
End of support: 27/08/2018
98 known vulnerabilities open in 1.9.0
Apache Airflow 1.8
Latest version: 1.8.2, released on 04/09/2017
End of support: 03/01/2018
102 known vulnerabilities open in 1.8.2
Apache Airflow 1.7
Latest version: 1.7.1.2, released on 20/05/2017
End of support: 19/03/2017
102 known vulnerabilities open in 1.7.1.2
Most recent vulnerabilities of Apache Airflow
- CVE-2026-86473, CVSS 3.1: 9.1, 21/09/2026
- CVE-2026-82355, CVSS 3.1: 4.2, 21/09/2026
- CVE-2026-75158, CVSS 3.1: 4.3, 21/09/2026
- CVE-2026-68971, CVSS 3.1: 6.5, 12/08/2026
- CVE-2026-68970, CVSS 3.1: 6.5, 12/08/2026
- CVE-2026-68969, CVSS 3.1: 6.5, 12/08/2026
- CVE-2026-68968, CVSS 3.1: 7.5, 12/08/2026
- CVE-2026-68076, CVSS 3.1: 5.4, 12/08/2026
- CVE-2026-67587, CVSS 3.1: 8.8, 12/08/2026
- CVE-2026-67260, CVSS 3.1: 7.3, 12/08/2026
Get notified
Add Apache Airflow with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add Apache Airflow