https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T06:57:40.147535+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-superset-2024-28148 BIT-superset-2024-28148 — Apache Superset: Incorrect datasource authorization on explore REST API 2026-10-20T06:57:40.152012+00:00

Affected: Bitnami: superset

An authenticated user could potentially access metadata for a datasource they are not authorized to view by submitting a targeted REST API request.This issue affects Apache Superset: before 3.1.2.

Users are recommended to upgrade to version 3.1.2 or above, which fixes the issue.

 https://cve.radiocsirt.org/vuln/cnvd-2024-24409 cnvd-2024-24409 2026-10-20T06:57:40.152071+00:00 cnvd-2024-24409 https://cve.radiocsirt.org/vuln/euvd-2026-4455 EUVD-2026-4455 2026-10-20T06:57:40.152088+00:00 EUVD-2026-4455 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28148 fkie_cve-2024-28148 2026-10-20T06:57:40.152100+00:00

An authenticated user could potentially access metadata for a datasource they are not authorized to view by submitting a targeted REST API request.This issue affects Apache Superset: before 3.1.2.

Users are recommended to upgrade to version 3.1.2 or above, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-299q-3p96-5898 GHSA-299q-3p96-5898 — Apache Superset Incorrect Authorization vulnerability 2026-10-20T06:57:40.152122+00:00

Affected: PyPI: apache-superset

An authenticated user could potentially access metadata for a datasource they are not authorized to view by submitting a targeted REST API request. This issue affects Apache Superset before 3.1.2.

Users are recommended to upgrade to version 3.1.2 or above, which fixes the issue.

 https://cve.radiocsirt.org/vuln/gsd-2024-28148 gsd-2024-28148 2026-10-20T06:57:40.152143+00:00 gsd-2024-28148 https://cve.radiocsirt.org/vuln/pysec-2026-1153 PYSEC-2026-1153 — Apache Superset Incorrect Authorization vulnerability 2026-10-20T06:57:40.152154+00:00

Affected: PyPI: apache-superset

An authenticated user could potentially access metadata for a datasource they are not authorized to view by submitting a targeted REST API request. This issue affects Apache Superset before 3.1.2.

Users are recommended to upgrade to version 3.1.2 or above, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1059 WID-SEC-W-2024-1059 — Apache Superset: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-20T06:57:40.152171+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache Superset ausnutzen, um Informationen offenzulegen.