Lucene search
+L

31 matches found

OSV
OSV
added 2026/07/07 10:17 a.m.7 views

PYSEC-2026-777 Apache Superset is vulnerable to Cross-Site Scripting (XSS)

Upload data forms do not correctly render user input leading to possible XSS attack vectors that can be performed by authenticated users with database connection update permissions. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0...

5.4CVSS5.9AI score0.01302EPSS
SaveExploits0References5
Rows per page
Query Builder