https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:28:51.628191+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-02828 bdu:2023-02828 2026-10-06T22:28:51.632352+00:00 bdu:2023-02828 https://cve.radiocsirt.org/vuln/bit-superset-2023-27524 BIT-superset-2023-27524 — Apache Superset: Session validation vulnerability when using provided default SECRET_KEY 2026-10-06T22:28:51.632384+00:00

Affected: Bitnami: superset

Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config.

All superset installations should always set a unique secure random SECRET_KEY. Your SECRET_KEY is used to securely sign all session cookies and encrypting sensitive information on the database. Add a strong SECRET_KEY to your `superset_config.py` file like:

SECRET_KEY = <YOUR_OWN_RANDOM_GENERATED_SECRET_KEY>

Alternatively you can set it with `SUPERSET_SECRET_KEY` environment variable.

 https://cve.radiocsirt.org/vuln/euvd-2026-255753 EUVD-2026-255753 2026-10-06T22:28:51.632430+00:00 EUVD-2026-255753 https://cve.radiocsirt.org/vuln/fkie_cve-2023-27524 fkie_cve-2023-27524 2026-10-06T22:28:51.632444+00:00

Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config.

All superset installations should always set a unique secure random SECRET_KEY. Your SECRET_KEY is used to securely sign all session cookies and encrypting sensitive information on the database. Add a strong SECRET_KEY to your `superset_config.py` file like:

SECRET_KEY = <YOUR_OWN_RANDOM_GENERATED_SECRET_KEY>

Alternatively you can set it with `SUPERSET_SECRET_KEY` environment variable.

 https://cve.radiocsirt.org/vuln/ghsa-5cx2-vq3h-x52c GHSA-5cx2-vq3h-x52c — Apache superset missing check for default SECRET_KEY 2026-10-06T22:28:51.632470+00:00

Affected: PyPI: apache-superset

Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config.

 https://cve.radiocsirt.org/vuln/gsd-2023-27524 gsd-2023-27524 2026-10-06T22:28:51.632490+00:00 gsd-2023-27524 https://cve.radiocsirt.org/vuln/pysec-2026-1161 PYSEC-2026-1161 — Apache superset missing check for default SECRET_KEY 2026-10-06T22:28:51.632501+00:00

Affected: PyPI: apache-superset

Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config.