Apache Software Foundation Apache Airflow Providers Keycloak

• CVE-2026-40948 Medium 5.4 Apache Airflow Providers Keycloak: OAuth Login CSRF — Missing State Parameter in Keycloak Auth Manager 0.4%