Sensitive Data Exposure

🗓️ 28 Feb 2026 05:12:50Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 3 Views

Sensitive data exposure in Superset lets limited users obtain password hashes via the Tag endpoint.

Reporter	Title	Published	Views	Family All 13
CNNVD	Apache Superset 安全漏洞	24 Feb 202600:00	–	cnnvd
CNVD	Apache Superset Information Disclosure Vulnerability	9 Mar 202600:00	–	cnvd
CVE	CVE-2026-23983	24 Feb 202612:52	–	cve
Cvelist	CVE-2026-23983 Apache Superset: Sensitive Data Exposure via REST API (disabled by default)	24 Feb 202612:52	–	cvelist
EUVD	EUVD-2026-8477	24 Feb 202612:52	–	euvd
Github Security Blog	Apache Superset allows authenticated users to view sensitive data without explicit permissions	24 Feb 202615:30	–	github
NVD	CVE-2026-23983	24 Feb 202614:16	–	nvd
OSV	BIT-SUPERSET-2026-23983 Apache Superset: Sensitive Data Exposure via REST API (disabled by default)	26 Feb 202608:54	–	osv
OSV	GHSA-H294-8FXM-M2PJ Apache Superset allows authenticated users to view sensitive data without explicit permissions	24 Feb 202615:30	–	osv
Positive Technologies	PT-2026-21681	24 Feb 202600:00	–	ptsecurity

Vulners

Node

apache_superset apache_supersetRange0.34.0–6.0.0rc4python

OR

apache_superset apache_supersetMatch0.34.0python

OR

apache_superset apache_supersetMatch0.34.1python

OR

apache_superset apache_supersetMatch0.35.1python

OR

apache_superset apache_supersetMatch0.35.2python

OR

apache_superset apache_supersetMatch0.36.0python

OR

apache_superset apache_supersetMatch0.37.0python

OR

apache_superset apache_supersetMatch0.37.1python

OR

apache_superset apache_supersetMatch0.37.2python

OR

apache_superset apache_supersetMatch0.38.0python

OR

apache_superset apache_supersetMatch0.38.1python

OR

apache_superset apache_supersetMatch1.0.0python

OR

apache_superset apache_supersetMatch1.0.1python

OR

apache_superset apache_supersetMatch1.1.0python

OR

apache_superset apache_supersetMatch1.2.0python

OR

apache_superset apache_supersetMatch1.3.0python

OR

apache_superset apache_supersetMatch1.3.1python

OR

apache_superset apache_supersetMatch1.3.2python

OR

apache_superset apache_supersetMatch1.4.0python

OR

apache_superset apache_supersetMatch1.4.1python

OR

apache_superset apache_supersetMatch1.4.2python

OR

apache_superset apache_supersetMatch1.5.0python

OR

apache_superset apache_supersetMatch1.5.1python

OR

apache_superset apache_supersetMatch1.5.2python

OR

apache_superset apache_supersetMatch1.5.3python

OR

apache_superset apache_supersetMatch2.0.0python

OR

apache_superset apache_supersetMatch2.0.1python

OR

apache_superset apache_supersetMatch2.1.0python

OR

apache_superset apache_supersetMatch2.1.1python

OR

apache_superset apache_supersetMatch2.1.1rc1python

OR

apache_superset apache_supersetMatch2.1.1rc2python

OR

apache_superset apache_supersetMatch2.1.1rc3python

OR

apache_superset apache_supersetMatch2.1.2python

OR

apache_superset apache_supersetMatch2.1.3python

OR

apache_superset apache_supersetMatch3.0.0python

OR

apache_superset apache_supersetMatch3.0.0rc1python

OR

apache_superset apache_supersetMatch3.0.0rc2python

OR

apache_superset apache_supersetMatch3.0.0rc3python

OR

apache_superset apache_supersetMatch3.0.0rc4python

OR

apache_superset apache_supersetMatch3.0.1python

OR

apache_superset apache_supersetMatch3.0.2python

OR

apache_superset apache_supersetMatch3.0.3python

OR

apache_superset apache_supersetMatch3.0.4python

OR

apache_superset apache_supersetMatch3.1.0python

OR

apache_superset apache_supersetMatch3.1.0rc1python

OR

apache_superset apache_supersetMatch3.1.0rc2python

OR

apache_superset apache_supersetMatch3.1.0rc3python

OR

apache_superset apache_supersetMatch3.1.0rc4python

OR

apache_superset apache_supersetMatch3.1.1python

OR

apache_superset apache_supersetMatch3.1.2python

OR

apache_superset apache_supersetMatch3.1.3python

OR

apache_superset apache_supersetMatch4.0.0python

OR

apache_superset apache_supersetMatch4.0.0rc1python

OR

apache_superset apache_supersetMatch4.0.0rc2python

OR

apache_superset apache_supersetMatch4.0.1python

OR

apache_superset apache_supersetMatch4.0.2python

OR

apache_superset apache_supersetMatch4.1.0python

OR

apache_superset apache_supersetMatch4.1.0rc2python

OR

apache_superset apache_supersetMatch4.1.0rc3python

OR

apache_superset apache_supersetMatch4.1.0rc4python

OR

apache_superset apache_supersetMatch4.1.1python

OR

apache_superset apache_supersetMatch4.1.1rc1python

OR

apache_superset apache_supersetMatch4.1.2python

OR

apache_superset apache_supersetMatch4.1.2rc1python

OR

apache_superset apache_supersetMatch4.1.3.post1python

OR

apache_superset apache_supersetMatch4.1.3rc1python

OR

apache_superset apache_supersetMatch4.1.3rc2python

OR

apache_superset apache_supersetMatch4.1.4python

OR

apache_superset apache_supersetMatch4.1.4rc1python

OR

apache_superset apache_supersetMatch5.0.0python

OR

apache_superset apache_supersetMatch5.0.0rc1python

OR

apache_superset apache_supersetMatch5.0.0rc2python

OR

apache_superset apache_supersetMatch5.0.0rc3python

OR

apache_superset apache_supersetMatch5.0.0rc4python

OR

apache_superset apache_supersetMatch6.0.0rc1python

OR

apache_superset apache_supersetMatch6.0.0rc2python

OR

apache_superset apache_supersetMatch6.0.0rc3python

Source	Link
lists	www.lists.apache.org/thread/62mgbc5hc8026skp69kb6vqozj3pr5ww
github	www.github.com/advisories/GHSA-h294-8fxm-m2pj

09 May 2026 05:40Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.16.5

CVSS 42.3

EPSS0.00055

SSVC

Sensitive data exposure Superset vulnerability Password hashes Emails Tag endpoint Limited users