By default, the Airflow installation which Meltano uses runs tasks with the SequentialExecutor (correct me if I'm wrong on this). So I'm guessing it might not be affected by this vulnerability in Airflow + CeleryExecutor, but I thought I'd post it in case https://snyk.io/blog/message-brokers/

You're right, Meltano doesn't override Airflow's default executor, so this will only affect installations that have explicitly chosen to use Celery instead. Thanks for sharing!