PT-2026-59053

Apache Superset utilizes a configurable dictionary, DISALLOWED SQL FUNCTIONS, to restrict the execution of potentially sensitive SQL functions within SQL Lab and charts. While this feature included restrictions for engines like PostgreSQL, a vulnerability was reported where the default list for t...