1037 matches found
PYSEC-2026-1189 Apache Superset Allows Ownership Takeover
Improper Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authenticated users with read permissions. This issue affects Apache Superset: through 4.1.1. Users are recommended to upgrade to version 4.1.2 or above, which fixes the issue...
PYSEC-2026-1167 Apache Superset uncontrolled resource consumption
Uncontrolled resource consumption can be triggered by authenticated attacker that uploads a malicious ZIP to import database, dashboards or datasets. This vulnerability exists in Apache Superset versions up to and including 2.1.2 and versions 3.0.0, 3.0.1...
PT-2026-56258
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The public dashboard deletion endpoint does not enforce organization isolation. This allows an Org Admin from one organization to delete public dashboards...
GHSA-G27C-Q7CP-MHX6 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...
CVE-2026-9673 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...
GHSA-G27C-Q7CP-MHX6 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-9673 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-FGMJ-FM8M-JVVX vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, kubeflow-katib...
CVE-2026-45249 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, kubeflow-katib...
GHSA-FGMJ-FM8M-JVVX vulnerabilities
Vulnerabilities for packages: kubeflow-katib, opensearch-dashboards...
CVE-2026-45249 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, opensearch-dashboards...
CVE-2026-11769
A flaw was found in the Grafana Operator. This vulnerability allows a malicious user, who can create Dashboard or LibraryPanel resources for a Grafana instance, to exploit a path traversal issue within the jsonnet data templating language. This exploitation can lead to privilege escalation and...
GO-2026-5095 Grafana public dashboards disclose all direct mode datasources in github.com/grafana/grafana
Grafana public dashboards disclose all direct mode datasources in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability...
DRUPAL-CONTRIB-2026-051
This module enables you to collect feedback from your site visitors on content pages, presenting Yes/No buttons and providing dashboards for administrators to review the responses. The module doesn't sufficiently sanitize several administrator-configured response messages the "Yes response", "No...
PT-2026-52164
Name of the Vulnerable Software and Affected Versions Drupal Advanced Content Feedback versions 0.0.0 through 2.8.0 Description Stored Cross-site Scripting XSS occurs when the module fails to sufficiently sanitize administrator-configured response messages. Specifically, the "Yes response", "No...
GHSA-36HH-X5P5-JGC8 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-44974 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-CMWH-PVXP-8882 vulnerabilities
Vulnerabilities for packages: kibana, librechat, opensearch-dashboards, langfuse-fips, nextcloud-server, wazuh-dashboard, gitlab-rails-ce-fips, opensearch-dashboards-fips, langfuse, gitlab-rails-ce, wazuh-dashboard-fips...
CVE-2026-56213 Capgo - Unauthenticated Cross-Tenant Metrics Poisoning via upsert_version_meta RPC
Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.upsertversionmeta SECURITY DEFINER function exposed via PostgREST RPC, allowing unauthenticated attackers to insert arbitrary rows into versionmeta for any appid. Attackers can exploit this by calling the RPC...
