https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:39:38.348225+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-10091 bdu:2025-10091 2026-10-03T21:39:38.420177+00:00 bdu:2025-10091 https://cve.radiocsirt.org/vuln/bit-superset-2025-55675 BIT-superset-2025-55675 — Apache Superset: Incorrect datasource authorization on REST API 2026-10-03T21:39:38.420214+00:00

Affected: Bitnami: superset

Apache Superset contains an improper access control vulnerability in its /explore endpoint. A missing authorization check allows an authenticated user to discover metadata about datasources they do not have permission to access. By iterating through the datasource_id in the URL, an attacker can enumerate and confirm the existence and names of protected datasources, leading to sensitive information disclosure.

This issue affects Apache Superset: before 5.0.0.

Users are recommended to upgrade to version 5.0.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/cnvd-2025-19101 cnvd-2025-19101 2026-10-03T21:39:38.420252+00:00 cnvd-2025-19101 https://cve.radiocsirt.org/vuln/euvd-2026-260038 EUVD-2026-260038 2026-10-03T21:39:38.420267+00:00 EUVD-2026-260038 https://cve.radiocsirt.org/vuln/fkie_cve-2025-55675 fkie_cve-2025-55675 2026-10-03T21:39:38.420278+00:00

Apache Superset contains an improper access control vulnerability in its /explore endpoint. A missing authorization check allows an authenticated user to discover metadata about datasources they do not have permission to access. By iterating through the datasource_id in the URL, an attacker can enumerate and confirm the existence and names of protected datasources, leading to sensitive information disclosure.

This issue affects Apache Superset: before 5.0.0.

Users are recommended to upgrade to version 5.0.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-mhpq-m962-mg92 GHSA-mhpq-m962-mg92 — Apache Superset allows authenticated users to discover metadata about datasources they don't have permission to access 2026-10-03T21:39:38.420303+00:00

Affected: PyPI: apache-superset

Apache Superset contains an improper access control vulnerability in its /explore endpoint. A missing authorization check allows an authenticated user to discover metadata about datasources they do not have permission to access. By iterating through the datasource_id in the URL, an attacker can enumerate and confirm the existence and names of protected datasources, leading to sensitive information disclosure.

This issue affects Apache Superset: before 5.0.0.

Users are recommended to upgrade to version 5.0.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/pysec-2026-1186 PYSEC-2026-1186 — Apache Superset allows authenticated users to discover metadata about datasources they don't have permission to access 2026-10-03T21:39:38.420325+00:00

Affected: PyPI: apache-superset

Apache Superset contains an improper access control vulnerability in its /explore endpoint. A missing authorization check allows an authenticated user to discover metadata about datasources they do not have permission to access. By iterating through the datasource_id in the URL, an attacker can enumerate and confirm the existence and names of protected datasources, leading to sensitive information disclosure.

This issue affects Apache Superset: before 5.0.0.

Users are recommended to upgrade to version 5.0.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1851 WID-SEC-W-2025-1851 — Apache Superset: Mehrere Schwachstellen 2026-10-03T21:39:38.420346+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Superset ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und vertrauliche Informationen offenzulegen.