https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T23:16:18.067896+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-superset-2022-43718 BIT-superset-2022-43718 — Apache Superset: Cross-Site Scripting vulnerability on upload forms 2026-10-16T23:16:18.071930+00:00

Affected: Bitnami: superset

Upload data forms do not correctly render user input leading to possible XSS attack vectors that can be performed by authenticated users with database connection update permissions. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.

 https://cve.radiocsirt.org/vuln/cnvd-2023-05219 cnvd-2023-05219 2026-10-16T23:16:18.072005+00:00 cnvd-2023-05219 https://cve.radiocsirt.org/vuln/euvd-2026-227338 EUVD-2026-227338 2026-10-16T23:16:18.072022+00:00 EUVD-2026-227338 https://cve.radiocsirt.org/vuln/fkie_cve-2022-43718 fkie_cve-2022-43718 2026-10-16T23:16:18.072035+00:00

Upload data forms do not correctly render user input leading to possible XSS attack vectors that can be performed by authenticated users with database connection update permissions. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.

 https://cve.radiocsirt.org/vuln/ghsa-79x5-cv79-49rj GHSA-79x5-cv79-49rj — Apache Superset is vulnerable to Cross-Site Scripting (XSS) 2026-10-16T23:16:18.072055+00:00

Affected: PyPI: apache-superset

Upload data forms do not correctly render user input leading to possible XSS attack vectors that can be performed by authenticated users with database connection update permissions. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.

 https://cve.radiocsirt.org/vuln/gsd-2022-43718 gsd-2022-43718 2026-10-16T23:16:18.072077+00:00 gsd-2022-43718 https://cve.radiocsirt.org/vuln/pysec-2026-777 PYSEC-2026-777 — Apache Superset is vulnerable to Cross-Site Scripting (XSS) 2026-10-16T23:16:18.072088+00:00

Affected: PyPI: apache-superset

Upload data forms do not correctly render user input leading to possible XSS attack vectors that can be performed by authenticated users with database connection update permissions. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.