https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T05:15:45.602197+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-01878 bdu:2025-01878 2026-10-27T05:15:45.606866+00:00 bdu:2025-01878 https://cve.radiocsirt.org/vuln/bit-superset-2021-27907 BIT-superset-2021-27907 — Apache Superset stored XSS on Dashboard markdown 2026-10-27T05:15:45.606897+00:00

Affected: Bitnami: superset

Apache Superset up to and including 0.38.0 allowed the creation of a Markdown component on a Dashboard page for describing chart's related information. Abusing this functionality, a malicious user could inject javascript code executing unwanted action in the context of the user's browser. The javascript code will be automatically executed (Stored XSS) when a legitimate user surfs on the dashboard page. The vulnerability is exploitable creating a “div” section and embedding in it a “svg” element with javascript code.

 https://cve.radiocsirt.org/vuln/cnvd-2021-29481 cnvd-2021-29481 2026-10-27T05:15:45.606933+00:00 cnvd-2021-29481 https://cve.radiocsirt.org/vuln/euvd-2026-215964 EUVD-2026-215964 2026-10-27T05:15:45.606949+00:00 EUVD-2026-215964 https://cve.radiocsirt.org/vuln/fkie_cve-2021-27907 fkie_cve-2021-27907 2026-10-27T05:15:45.606960+00:00

Apache Superset up to and including 0.38.0 allowed the creation of a Markdown component on a Dashboard page for describing chart's related information. Abusing this functionality, a malicious user could inject javascript code executing unwanted action in the context of the user's browser. The javascript code will be automatically executed (Stored XSS) when a legitimate user surfs on the dashboard page. The vulnerability is exploitable creating a “div” section and embedding in it a “svg” element with javascript code.

 https://cve.radiocsirt.org/vuln/ghsa-w358-rj93-r5qv GHSA-w358-rj93-r5qv — Apache Superset Stored XSS on Dashboard markdown 2026-10-27T05:15:45.606984+00:00

Affected: PyPI: apache-superset

Apache Superset up to and including 0.38.0 allowed the creation of a Markdown component on a Dashboard page for describing chart's related information. Abusing this functionality, a malicious user could inject javascript code executing unwanted action in the context of the user's browser. The javascript code will be automatically executed (Stored XSS) when a legitimate user surfs on the dashboard page. The vulnerability is exploitable creating a “div” section and embedding in it a “svg” element with javascript code.

 https://cve.radiocsirt.org/vuln/gsd-2021-27907 gsd-2021-27907 2026-10-27T05:15:45.607007+00:00 gsd-2021-27907 https://cve.radiocsirt.org/vuln/pysec-2021-127 PYSEC-2021-127 2026-10-27T05:15:45.607019+00:00

Affected: PyPI: apache-superset

Apache Superset up to and including 0.38.0 allowed the creation of a Markdown component on a Dashboard page for describing chart's related information. Abusing this functionality, a malicious user could inject javascript code executing unwanted action in the context of the user's browser. The javascript code will be automatically executed (Stored XSS) when a legitimate user surfs on the dashboard page. The vulnerability is exploitable creating a “div” section and embedding in it a “svg” element with javascript code.