https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T11:00:12.774200+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-05600 bdu:2023-05600 2026-10-21T11:00:12.778634+00:00 bdu:2023-05600 https://cve.radiocsirt.org/vuln/bit-superset-2023-39265 BIT-superset-2023-39265 — Apache Superset: Possible Unauthorized Registration of SQLite Database Connections 2026-10-21T11:00:12.778664+00:00

Affected: Bitnami: superset

Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Additionally, if Apache Superset is using a SQLite database for its metadata (not advised for production use) it could result in more severe vulnerabilities related to confidentiality and integrity. This vulnerability exists in Apache Superset versions up to and including 2.1.0.

 https://cve.radiocsirt.org/vuln/cnvd-2024-06819 cnvd-2024-06819 2026-10-21T11:00:12.778700+00:00 cnvd-2024-06819 https://cve.radiocsirt.org/vuln/euvd-2026-216689 EUVD-2026-216689 2026-10-21T11:00:12.778715+00:00 EUVD-2026-216689 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39265 fkie_cve-2023-39265 2026-10-21T11:00:12.778726+00:00

Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Additionally, if Apache Superset is using a SQLite database for its metadata (not advised for production use) it could result in more severe vulnerabilities related to confidentiality and integrity. This vulnerability exists in Apache Superset versions up to and including 2.1.0.

 https://cve.radiocsirt.org/vuln/ghsa-fm4q-j8g4-c9j4 GHSA-fm4q-j8g4-c9j4 — Apache Superset Improper Input Validation vulnerability 2026-10-21T11:00:12.778749+00:00

Affected: PyPI: apache-superset

Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Additionally, if Apache Superset is using a SQLite database for its metadata (not advised for production use) it could result in more severe vulnerabilities related to confidentiality and integrity. This vulnerability exists in Apache Superset versions up to and including 2.1.0.

 https://cve.radiocsirt.org/vuln/gsd-2023-39265 gsd-2023-39265 2026-10-21T11:00:12.778770+00:00 gsd-2023-39265 https://cve.radiocsirt.org/vuln/pysec-2026-1177 PYSEC-2026-1177 — Apache Superset Improper Input Validation vulnerability 2026-10-21T11:00:12.778781+00:00

Affected: PyPI: apache-superset

Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Additionally, if Apache Superset is using a SQLite database for its metadata (not advised for production use) it could result in more severe vulnerabilities related to confidentiality and integrity. This vulnerability exists in Apache Superset versions up to and including 2.1.0.