The previous default setting for Airflow's Experimental API was to allow all API requests without authentication.
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.