In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.
"https://github.com/pypa/advisory-database/blob/main/vulns/apache-airflow/PYSEC-2022-279.yaml"