Lucene search
+L

8 matches found

OSV
OSV
added 2026/02/24 3:30 p.m.8 views

GHSA-48M2-V2R8-H23M Apache Superset: Incomplete DISALLOWED_SQL_FUNCTIONS default list for ClickHouse engine

Apache Superset utilizes a configurable dictionary, DISALLOWEDSQLFUNCTIONS, to restrict the execution of potentially sensitive SQL functions within SQL Lab and charts. While this feature included restrictions for engines like PostgreSQL, a vulnerability was reported where the default list for the...

5.3CVSS6AI score0.00607EPSS
SaveExploits0References4
Rows per page
Query Builder