Security
فارسی
All products

apache-superset

PyPI · Package
66 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Cross-site Scripting in Apache supersetCVE-2023-49657 · GHSA-RWHH-6X83-84V6Version ranges need review. apache-superset PyPI Critical Fix reported
Apache Superset allows authenticated users to view sensitive data without explicit permissionsCVE-2026-23983 · GHSA-H294-8FXM-M2PJVersion ranges need review. apache-superset PyPI Low Fix reported
Open Redirect in Apache SupersetCVE-2021-28125 · GHSA-PFWG-RXF4-97C3Version ranges need review. apache-supersetsuperset PyPI Medium Fix reported
Apache Superset Improper Authorization allows low-privileged users to bypass access controls CVE-2026-23982 · GHSA-3M2G-V7JF-7FXCVersion ranges need review. apache-superset PyPI High Fix reported
Apache Superset: Read-Only Bypass via Improper Input Validation on PostgreSQL ConnectionsCVE-2026-23984 · GHSA-MWF2-QR4V-94H2Version ranges need review. apache-superset PyPI High Fix reported
Apache Superset allows privileged users to conduct error-based SQL InjectionCVE-2026-23980 · GHSA-GVXG-9HQX-F4RGVersion ranges need review. apache-superset PyPI Medium Fix reported
Apache Superset: Incomplete DISALLOWED_SQL_FUNCTIONS default list for ClickHouse engineCVE-2026-23969 · GHSA-48M2-V2R8-H23MVersion ranges need review. apache-superset PyPI Medium Fix reported
Apache Superset Improper Input Validation vulnerabilityCVE-2023-39265 · GHSA-FM4Q-J8G4-C9J4Version ranges need review. apache-superset PyPI Medium Fix reported
Apache Superset has Incorrect Default PermissionsCVE-2023-42501 · GHSA-VV65-FJFJ-4736Version ranges need review. apache-superset PyPI Medium Fix reported
Apache Superset vulnerable to improper SQL authorizationCVE-2024-39887 · GHSA-2Q6J-VPVR-6PVJVersion ranges need review. apache-superset PyPI Medium Fix reported
Apache Superset Exposure of Sensitive Information to an Unauthorized Actor vulnerabilityCVE-2023-42505 · GHSA-FGPW-4W69-J256Version ranges need review. apache-superset PyPI Medium Fix reported
Apache Superset vulnerable to Exposure of Sensitive InformationCVE-2023-30776 · GHSA-CMJC-52FG-9F7JVersion ranges need review. apache-superset PyPI Medium Fix reported
Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functionsCVE-2024-53947 · GHSA-92QF-8GH3-GWCMVersion ranges need review. apache-superset PyPI Low Fix reported
Apache Superset: Improper validation of SQL statements allows for unauthorized access to dataCVE-2024-24773 · GHSA-5474-F7G5-273QVersion ranges need review. apache-superset PyPI Medium Fix reported
Apache Superset vulnerable to improper data authorizationCVE-2023-27523 · GHSA-V594-2C97-HX38Version ranges need review. apache-superset PyPI Medium Fix reported
Apache Superset Allows Ownership TakeoverCVE-2025-27696 · GHSA-W6C7-J32F-RQ8JVersion ranges need review. apache-superset PyPI Medium Fix reported
Apache Superset: Improper data authorization when creating a new datasetCVE-2024-24779 · GHSA-WR6G-9WCR-CMQJVersion ranges need review. apache-superset PyPI Medium Fix reported
Apache Superset data query improperly discloses database schema information to low-privileged guest userCVE-2025-55673 · GHSA-9G5X-MM39-WG9RVersion ranges need review. apache-superset PyPI Medium Fix reported
Apache Superset server arbitrary file read CVE-2024-34693 · GHSA-HCR7-CQWC-Q5GQVersion ranges need review. apache-superset PyPI Medium Fix reported
Apache Superset: Improper Neutralization of custom SQL on embedded contextCVE-2024-24772 · GHSA-M6JM-3V38-76J4Version ranges need review. apache-superset PyPI Medium Fix reported