https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:28:48 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-02828 bdu:2023-02828 https://cve.radiocsirt.org/vuln/bdu:2023-02828 https://cve.radiocsirt.org/vuln/bit-superset-2023-27524 <p><strong>Affected:</strong> Bitnami: superset</p> <p>Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config.</p> <p>All superset installations should always set a unique secure random SECRET_KEY. Your SECRET_KEY is used to securely sign all session cookies and encrypting sensitive information on the database. Add a strong SECRET_KEY to your `superset_config.py` file like:</p> <p>SECRET_KEY = &lt;YOUR_OWN_RANDOM_GENERATED_SECRET_KEY&gt;</p> <p>Alternatively you can set it with `SUPERSET_SECRET_KEY` environment variable.</p> <p><strong>Affected:</strong> Bitnami: superset</p> <p>Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config.</p> <p>All superset installations should always set a unique secure random SECRET_KEY. Your SECRET_KEY is used to securely sign all session cookies and encrypting sensitive information on the database. Add a strong SECRET_KEY to your `superset_config.py` file like:</p> <p>SECRET_KEY = &lt;YOUR_OWN_RANDOM_GENERATED_SECRET_KEY&gt;</p> <p>Alternatively you can set it with `SUPERSET_SECRET_KEY` environment variable.</p> https://cve.radiocsirt.org/vuln/bit-superset-2023-27524 https://cve.radiocsirt.org/vuln/euvd-2026-255753 EUVD-2026-255753 https://cve.radiocsirt.org/vuln/euvd-2026-255753 https://cve.radiocsirt.org/vuln/fkie_cve-2023-27524 <p>Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config.</p> <p>All superset installations should always set a unique secure random SECRET_KEY. Your SECRET_KEY is used to securely sign all session cookies and encrypting sensitive information on the database. Add a strong SECRET_KEY to your `superset_config.py` file like:</p> <p>SECRET_KEY = &lt;YOUR_OWN_RANDOM_GENERATED_SECRET_KEY&gt;</p> <p>Alternatively you can set it with `SUPERSET_SECRET_KEY` environment variable.</p> <p>Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config.</p> <p>All superset installations should always set a unique secure random SECRET_KEY. Your SECRET_KEY is used to securely sign all session cookies and encrypting sensitive information on the database. Add a strong SECRET_KEY to your `superset_config.py` file like:</p> <p>SECRET_KEY = &lt;YOUR_OWN_RANDOM_GENERATED_SECRET_KEY&gt;</p> <p>Alternatively you can set it with `SUPERSET_SECRET_KEY` environment variable.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-27524 https://cve.radiocsirt.org/vuln/ghsa-5cx2-vq3h-x52c <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config.</p> https://cve.radiocsirt.org/vuln/ghsa-5cx2-vq3h-x52c https://cve.radiocsirt.org/vuln/gsd-2023-27524 gsd-2023-27524 https://cve.radiocsirt.org/vuln/gsd-2023-27524 https://cve.radiocsirt.org/vuln/pysec-2026-1161 <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config.</p> https://cve.radiocsirt.org/vuln/pysec-2026-1161