Pick your stack
See what your vendors published in the last 90 days.
Tick the vendors you run. The numbers are real advisories from their official sources, matched the way your alert rules would be. No account needed to look.
1. What do you run?
Apache Airflow only
2. Your last 90 days
These picks would have alerted you 16 times, in 5 of the last 12 weeks.
- alerts at this priority
- 16
- advisories published
- 40
- critical
- 7
- exploited or CISA KEV
- 0
Your inbox, most recent first
- High [CVE-2026-111422] In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated `environment` parameter only once, although they are placed inside an already-quoted wrapper script, so shell syntax such as `$(...)` in a value was executed on the remote SSH hostApache · 26 Oct
- Critical [CVE-2026-94134 +1] The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless `host_key` is configured or `no_host_key_check` is explicitly set to false, it accepts any server keyApache · 15 Oct
- Critical [CVE-2026-86473] Apache Airflow: Logout ignores a presented Authorization bearer token, leaving it revocable only by expiryApache · 21 Sept
3. Choose how you hear about them
One product free
One product of your choice gets real-time alerts, free for life, no card. Your other picks are saved, paused, and turn on if you start Pro.
One account per person. If you make a second account to get another free product, both accounts are banned permanently.
Free month of real-time alerts
Each new advisory for these picks by email, in the iPhone or Android app or in Discord, as soon as the vendor publishes it.
Card needed. One free month per person, then US$15/month unless you cancel; we email you 7 days and again 2 days before the first charge.