CVE-2026-32794: TLS Certificate Verification Bypass in Apache Airflow Databricks Provider
-
Updated
May 8, 2026
CVE-2026-32794: TLS Certificate Verification Bypass in Apache Airflow Databricks Provider
A zero-config, cross-language static gate that flags code disabling TLS/SSL certificate verification (verify=Fa InsecureSkipVerify, rejectUnauthorized:false...) - a silent man-in-the-middle exposure (CWE-295) - and points you atlse, the real fix. Single Go binary.
To associate your repository with the cwe-295 topic, visit your repo's landing page and select "manage topics."