Dear Airflow community, Please upgrade to Airflow 1.10.14, it contains a critical security fix. If you would like to stay on the same version then please make sure that your Airflow instance is not publicly routable.
CVE for the same would be publicly announced on Monday, 21 Dec 2020. Regards, Kaxil