CVE-2025-55674 vulnerabilities

Vulnerabilities for packages: superset...

GHSA-JR27-M4P2-RC6R vulnerabilities

Vulnerabilities for packages: k8s-sidecar, py3-cassandra-medusa, kubeflow-pipelines, datadog-agent, airflow, kubeflow-pipelines-visualization-server, mlflow, superset, kubeflow-jupyter-web-app, kubeflow-volumes-web-app...

Apache Superset < 4.1.2 Multiple Vulnerabilities

According to its self-reported version, the Apache Superset is prior to 4.1.2. It is, therefore, affected by multiple vulnerabilities. - Improper Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authenticated users with read permissions...

GHSA-XG8H-J46F-W952 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, tensorflow-cpu-jupyter, superset...

CVE-2025-47273 vulnerabilities

Vulnerabilities for packages: text-generation-inference, spamcheck, pgadmin4-fips, ansible-operator, datadog-agent, checkov, aws-cli, emissary, kserve, dask-gateway, ansible-operator-fips, nvidia-nsight-compute-13.1, azure-functions-host, datadog-agent-fips, jwt-tool, superset...

CVE-2022-43719

Two legacy REST API endpoints for approval and request access are vulnerable to cross site request forgery. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0...

GHSA-99PM-CH96-CCP2 vulnerabilities

Vulnerabilities for packages: airflow, superset...

CVE-2024-6827 vulnerabilities

Vulnerabilities for packages: emissary, superset...

CVE-2025-24023 vulnerabilities

Vulnerabilities for packages: superset...

Apache Superset: Error verbosity exposes metadata in analytics databases

Generation of Error Message Containing analytics metadata Information in Apache Superset. This issue affects Apache Superset: before 4.1.0. Users are recommended to upgrade to version 4.1.0, which fixes the issue...

CVE-2024-5569 vulnerabilities

Vulnerabilities for packages: checkov, superset, kubeflow-pipelines...