1208 matches found
BIT-SUPERSET-2026-23981 Apache Superset: Improper Authorization in Chart Update allowing Dashboard Modification
An Improper Authorization vulnerability exists in Apache Superset allowing an authenticated user with permissions to update charts to modify dashboards they do not own. When updating a chart's properties via the REST API, a user can provide a list of dashboard IDs dashboards to associate the char...
Apache Superset < 4.0.2 - SQL Injection
An SQL Injection vulnerability in Apache Superset exists due to improper neutralization of special elements used in SQL commands. Specifically, certain engine-specific functions are not checked, which allows attackers to bypass Apache Superset's SQL authorization. To mitigate this, a new...
Apache Superset <=1.3.2 - Default Login
Apache Superset through 1.3.2 contains a default login vulnerability via registered database connections for authenticated users. An attacker can obtain access to user accounts and thereby obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-44451 info:...
Apache Superset - Authentication Bypass
Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRETKEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset...
CVE-2026-59884 vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, superset, mlflow, airflow, kserve, kubeflow-pipelines...
GHSA-M4P7-R5RC-7G4J vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, superset, mlflow, airflow, kserve, kubeflow-pipelines...
CVE-2026-59884 vulnerabilities
Vulnerabilities for packages: authentik-fips, localstack, lmcache-cuda-12.8, openstack-keystone-2025.1, superset, wazuh-manager, datahub-ingestion, mlflow, kubeflow-pipelines, kserve, wazuh-manager-fips, duplicity, openstack-keystone-2025.2, airflow, apache-beam-python-3.12-sdk, authentik,...
GHSA-M4P7-R5RC-7G4J vulnerabilities
Vulnerabilities for packages: authentik-fips, localstack, lmcache-cuda-12.8, openstack-keystone-2025.1, superset, wazuh-manager, datahub-ingestion, mlflow, kubeflow-pipelines, kserve, wazuh-manager-fips, duplicity, openstack-keystone-2025.2, airflow, apache-beam-python-3.12-sdk, authentik,...
GHSA-XJ96-63GP-2GMR vulnerabilities
Vulnerabilities for packages: mlflow, superset...
GHSA-45HQ-CXWH-F6VC vulnerabilities
Vulnerabilities for packages: mlflow, superset...
GHSA-5X94-69RX-G8H2 vulnerabilities
Vulnerabilities for packages: mlflow, superset...
GHSA-8V84-F9PQ-WR9X vulnerabilities
Vulnerabilities for packages: mlflow, superset...
GHSA-4X4J-2G7C-83W6 vulnerabilities
Vulnerabilities for packages: mlflow, superset...
CVE-2026-59204 vulnerabilities
Vulnerabilities for packages: mlflow, superset...
CVE-2026-59200 vulnerabilities
Vulnerabilities for packages: mlflow, superset...
CVE-2026-59205 vulnerabilities
Vulnerabilities for packages: mlflow, superset...
GHSA-PHJ9-MV4W-65PM vulnerabilities
Vulnerabilities for packages: mlflow, superset...
GHSA-VJC4-5QP5-M44J vulnerabilities
Vulnerabilities for packages: mlflow, superset...