https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T14:43:00.931769+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-superset-2024-23952 BIT-superset-2024-23952 — Apache Superset: Allows for uncontrolled resource consumption via a ZIP bomb (version range fix for CVE-2023-46104) 2026-10-16T14:43:00.936021+00:00

Affected: Bitnami: superset

This is a duplicate for CVE-2023-46104. With correct CVE version ranges for affected Apache Superset. Uncontrolled resource consumption can be triggered by authenticated attacker that uploads a malicious ZIP to import database, dashboards or datasets.   This vulnerability exists in Apache Superset versions up to and including 2.1.2 and versions 3.0.0, 3.0.1.

 https://cve.radiocsirt.org/vuln/cnvd-2024-14775 cnvd-2024-14775 2026-10-16T14:43:00.936089+00:00 cnvd-2024-14775 https://cve.radiocsirt.org/vuln/euvd-2026-217222 EUVD-2026-217222 2026-10-16T14:43:00.936114+00:00 EUVD-2026-217222 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23952 fkie_cve-2024-23952 2026-10-16T14:43:00.936134+00:00

This is a duplicate for CVE-2023-46104. With correct CVE version ranges for affected Apache Superset. Uncontrolled resource consumption can be triggered by authenticated attacker that uploads a malicious ZIP to import database, dashboards or datasets.   This vulnerability exists in Apache Superset versions up to and including 2.1.2 and versions 3.0.0, 3.0.1.

 https://cve.radiocsirt.org/vuln/ghsa-v7q3-5rqm-x7m9 Withdrawn: GHSA-v7q3-5rqm-x7m9 — Duplicate Advisory: Apache Superset uncontrolled resource consumption 2026-10-16T14:43:00.936172+00:00

Withdrawn by the publisher.

Affected: PyPI: apache-superset

## Duplicate Advisory This advisory has been withdrawn because it is a duplicate of CVE-2023-46104. This link is maintained to preserve external references.

## Original Description With correct CVE version ranges for affected Apache Superset. Uncontrolled resource consumption can be triggered by authenticated attacker that uploads a malicious ZIP to import database, dashboards or datasets.   This vulnerability exists in Apache Superset versions up to and including 2.1.2 and versions 3.0.0, 3.0.1.

 https://cve.radiocsirt.org/vuln/gsd-2024-23952 gsd-2024-23952 2026-10-16T14:43:00.936241+00:00 gsd-2024-23952 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3184 WID-SEC-W-2023-3184 — Apache Superset: Mehrere Schwachstellen 2026-10-16T14:43:00.936256+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache Superset ausnutzen, um einen Denial of Service zu verursachen, Sicherheitseinstellungen zu umgehen und einen SQL-Injection Angriff durchzuführen.