Most recent entries from all

BIT-superset-2025-27696 — Apache Superset: Incorrect authorization leading to resource ownership takeover

2026-10-10T16:42:15.530221+00:00

Affected: Bitnami: superset

Incorrect Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authenticated users with read permissions.

This issue affects Apache Superset: through 4.1.1.

Users are recommended to upgrade to version 4.1.2 or above, which fixes the issue.

EUVD-2026-251555

2026-10-10T16:42:15.530288+00:00

EUVD-2026-251555

fkie_cve-2025-27696

2026-10-10T16:42:15.530306+00:00

Incorrect Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authenticated users with read permissions.

This issue affects Apache Superset: through 4.1.1.

Users are recommended to upgrade to version 4.1.2 or above, which fixes the issue.

GHSA-w6c7-j32f-rq8j — Apache Superset Allows Ownership Takeover

2026-10-10T16:42:15.530334+00:00

Affected: PyPI: apache-superset

Improper Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authenticated users with read permissions.

This issue affects Apache Superset: through 4.1.1.

Users are recommended to upgrade to version 4.1.2 or above, which fixes the issue.

PYSEC-2026-1189 — Apache Superset Allows Ownership Takeover

2026-10-10T16:42:15.530357+00:00

Affected: PyPI: apache-superset

Improper Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authenticated users with read permissions.

This issue affects Apache Superset: through 4.1.1.

Users are recommended to upgrade to version 4.1.2 or above, which fixes the issue.

WID-SEC-W-2025-1008 — Apache Superset: Schwachstelle ermöglicht Umgehung von Sicherheitsvorkehrungen

2026-10-10T16:42:15.530379+00:00

Ein Angreifer kann eine Schwachstelle in Apache Superset ausnutzen, um Sicherheitsvorkehrungen zu umgehen.