https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T20:24:38.231182+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-superset-2023-49734 BIT-superset-2023-49734 — Apache Superset: Privilege Escalation Vulnerability 2026-10-16T20:24:38.236104+00:00

Affected: Bitnami: superset

An authenticated Gamma user has the ability to create a dashboard and add charts to it, this user would automatically become one of the owners of the charts allowing him to incorrectly have write permissions to these charts.This issue affects Apache Superset: before 2.1.2, from 3.0.0 before 3.0.2.

Users are recommended to upgrade to version 3.0.2 or 2.1.3, which fixes the issue.

 https://cve.radiocsirt.org/vuln/cnvd-2024-01022 cnvd-2024-01022 2026-10-16T20:24:38.236155+00:00 cnvd-2024-01022 https://cve.radiocsirt.org/vuln/euvd-2026-216966 EUVD-2026-216966 2026-10-16T20:24:38.236173+00:00 EUVD-2026-216966 https://cve.radiocsirt.org/vuln/fkie_cve-2023-49734 fkie_cve-2023-49734 2026-10-16T20:24:38.236185+00:00

An authenticated Gamma user has the ability to create a dashboard and add charts to it, this user would automatically become one of the owners of the charts allowing him to incorrectly have write permissions to these charts.This issue affects Apache Superset: before 2.1.2, from 3.0.0 before 3.0.2.

Users are recommended to upgrade to version 3.0.2 or 2.1.3, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-g49j-j489-3xpf GHSA-g49j-j489-3xpf — Apache Superset incorrect write permissions vulnerability 2026-10-16T20:24:38.236208+00:00

Affected: PyPI: apache-superset

An authenticated Gamma user has the ability to create a dashboard and add charts to it, this user would automatically become one of the owners of the charts allowing him to incorrectly have write permissions to these charts.This issue affects Apache Superset: before 2.1.3, from 3.0.0 before 3.0.2.

Users are recommended to upgrade to version 3.0.2 or 2.1.3, which fixes the issue.

 https://cve.radiocsirt.org/vuln/gsd-2023-49734 gsd-2023-49734 2026-10-16T20:24:38.236231+00:00 gsd-2023-49734 https://cve.radiocsirt.org/vuln/pysec-2026-1180 PYSEC-2026-1180 — Apache Superset incorrect write permissions vulnerability 2026-10-16T20:24:38.236242+00:00

Affected: PyPI: apache-superset

An authenticated Gamma user has the ability to create a dashboard and add charts to it, this user would automatically become one of the owners of the charts allowing him to incorrectly have write permissions to these charts.This issue affects Apache Superset: before 2.1.3, from 3.0.0 before 3.0.2.

Users are recommended to upgrade to version 3.0.2 or 2.1.3, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3184 WID-SEC-W-2023-3184 — Apache Superset: Mehrere Schwachstellen 2026-10-16T20:24:38.236261+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache Superset ausnutzen, um einen Denial of Service zu verursachen, Sicherheitseinstellungen zu umgehen und einen SQL-Injection Angriff durchzuführen.