https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T07:51:57.829029+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-28148 CVE-2024-28148 — Apache Superset: Incorrect datasource authorization on explore REST API 2026-10-20T07:51:57.830755+00:00

Affected: Apache Software Foundation Apache Superset

An authenticated user could potentially access metadata for a datasource they are not authorized to view by submitting a targeted REST API request.This issue affects Apache Superset: before 3.1.2.

Users are recommended to upgrade to version 3.1.2 or above, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-299q-3p96-5898 GHSA-299q-3p96-5898 — Apache Superset Incorrect Authorization vulnerability 2026-10-20T07:51:57.830809+00:00

Affected: PyPI: apache-superset

An authenticated user could potentially access metadata for a datasource they are not authorized to view by submitting a targeted REST API request. This issue affects Apache Superset before 3.1.2.

Users are recommended to upgrade to version 3.1.2 or above, which fixes the issue.