https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T23:49:18.265230+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-superset-2024-24773 BIT-superset-2024-24773 — Apache Superset: Improper validation of SQL statements allows for unauthorized access to data 2026-10-09T23:49:18.269721+00:00

Affected: Bitnami: superset

Improper parsing of nested SQL statements on SQLLab would allow authenticated users to surpass their data authorization scope. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.

Users are recommended to upgrade to version 3.1.1, which fixes the issue.

 https://cve.radiocsirt.org/vuln/cnvd-2024-26537 cnvd-2024-26537 2026-10-09T23:49:18.269777+00:00 cnvd-2024-26537 https://cve.radiocsirt.org/vuln/euvd-2026-217239 EUVD-2026-217239 2026-10-09T23:49:18.269795+00:00 EUVD-2026-217239 https://cve.radiocsirt.org/vuln/fkie_cve-2024-24773 fkie_cve-2024-24773 2026-10-09T23:49:18.269807+00:00

Improper parsing of nested SQL statements on SQLLab would allow authenticated users to surpass their data authorization scope. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.

Users are recommended to upgrade to version 3.1.1, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-5474-f7g5-273q GHSA-5474-f7g5-273q — Apache Superset: Improper validation of SQL statements allows for unauthorized access to data 2026-10-09T23:49:18.269830+00:00

Affected: PyPI: apache-superset

Improper parsing of nested SQL statements on SQLLab would allow authenticated users to surpass their data authorization scope. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.

Users are recommended to upgrade to version 3.1.1, which fixes the issue.

 https://cve.radiocsirt.org/vuln/gsd-2024-24773 gsd-2024-24773 2026-10-09T23:49:18.269852+00:00 gsd-2024-24773 https://cve.radiocsirt.org/vuln/pysec-2026-1160 PYSEC-2026-1160 — Apache Superset: Improper validation of SQL statements allows for unauthorized access to data 2026-10-09T23:49:18.269864+00:00

Affected: PyPI: apache-superset

Improper parsing of nested SQL statements on SQLLab would allow authenticated users to surpass their data authorization scope. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.

Users are recommended to upgrade to version 3.1.1, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0515 WID-SEC-W-2024-0515 — Apache Superset: Mehrere Schwachstellen ermöglichen Manipulation von Dateien 2026-10-09T23:49:18.269882+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Superset ausnutzen, um Dateien zu manipulieren.