https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T22:27:14.044236+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-superset-2021-28125 BIT-superset-2021-28125 — Apache Superset Open Redirect 2026-10-14T22:27:14.048621+00:00

Affected: Bitnami: superset

Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.

 https://cve.radiocsirt.org/vuln/cnvd-2021-38303 cnvd-2021-38303 2026-10-14T22:27:14.048667+00:00 cnvd-2021-38303 https://cve.radiocsirt.org/vuln/euvd-2026-25857 EUVD-2026-25857 2026-10-14T22:27:14.048684+00:00 EUVD-2026-25857 https://cve.radiocsirt.org/vuln/fkie_cve-2021-28125 fkie_cve-2021-28125 2026-10-14T22:27:14.048696+00:00

Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.

 https://cve.radiocsirt.org/vuln/ghsa-pfwg-rxf4-97c3 GHSA-pfwg-rxf4-97c3 — Open Redirect in Apache Superset 2026-10-14T22:27:14.048716+00:00

Affected: PyPI: superset, PyPI: apache-superset

Apache Superset prior to 1.1.0 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.

 https://cve.radiocsirt.org/vuln/gsd-2021-28125 gsd-2021-28125 2026-10-14T22:27:14.048739+00:00 gsd-2021-28125 https://cve.radiocsirt.org/vuln/pysec-2021-128 PYSEC-2021-128 2026-10-14T22:27:14.048750+00:00

Affected: PyPI: apache-superset

Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.