https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T16:58:25.755212+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-superset-2024-24772 BIT-superset-2024-24772 — Apache Superset: Improper Neutralisation of custom SQL on embedded context 2026-10-09T16:58:25.759676+00:00

Affected: Bitnami: superset

A guest user could exploit a chart data REST API and send arbitrary SQL statements that on error could leak information from the underlying analytics database.This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.

Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.

 https://cve.radiocsirt.org/vuln/cnvd-2024-26534 cnvd-2024-26534 2026-10-09T16:58:25.759730+00:00 cnvd-2024-26534 https://cve.radiocsirt.org/vuln/euvd-2026-214800 EUVD-2026-214800 2026-10-09T16:58:25.759748+00:00 EUVD-2026-214800 https://cve.radiocsirt.org/vuln/fkie_cve-2024-24772 fkie_cve-2024-24772 2026-10-09T16:58:25.759759+00:00

A guest user could exploit a chart data REST API and send arbitrary SQL statements that on error could leak information from the underlying analytics database.This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.

Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-m6jm-3v38-76j4 GHSA-m6jm-3v38-76j4 — Apache Superset: Improper Neutralization of custom SQL on embedded context 2026-10-09T16:58:25.759782+00:00

Affected: PyPI: apache-superset

A guest user could exploit a chart data REST API and send arbitrary SQL statements that on error could leak information from the underlying analytics database.This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.

Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.

 https://cve.radiocsirt.org/vuln/gsd-2024-24772 gsd-2024-24772 2026-10-09T16:58:25.759804+00:00 gsd-2024-24772 https://cve.radiocsirt.org/vuln/pysec-2026-1185 PYSEC-2026-1185 — Apache Superset: Improper Neutralization of custom SQL on embedded context 2026-10-09T16:58:25.759815+00:00

Affected: PyPI: apache-superset

A guest user could exploit a chart data REST API and send arbitrary SQL statements that on error could leak information from the underlying analytics database.This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.

Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0515 WID-SEC-W-2024-0515 — Apache Superset: Mehrere Schwachstellen ermöglichen Manipulation von Dateien 2026-10-09T16:58:25.759833+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Superset ausnutzen, um Dateien zu manipulieren.