PoC Archive PoC Archive

tag

Host-Header-Injection

High
Apache Airflow AWS Auth Manager SAML Host Header Injection (CVE-2026-25604)
CVE-2026-25604· Apache Airflow — apache-airflow-providers-amazon (AWS Auth Manager) patched