<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 18 Oct 2026 11:33:33 +0000</lastBuildDate>
    <item>
      <title>BIT-superset-2023-32672 — Apache Superset: SQL parser edge case bypasses data access authorization</title>
      <link>https://cve.radiocsirt.org/vuln/bit-superset-2023-32672</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Bitnami: superset&lt;/p&gt;
&lt;p&gt;An Incorrect authorisation check in SQLLab in Apache Superset versions up to and including 2.1.0. This vulnerability allows an authenticated user to query tables that they do not have proper access to within Superset. The vulnerability can be exploited by leveraging a SQL parsing vulnerability.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Bitnami: superset&lt;/p&gt;
&lt;p&gt;An Incorrect authorisation check in SQLLab in Apache Superset versions up to and including 2.1.0. This vulnerability allows an authenticated user to query tables that they do not have proper access to within Superset. The vulnerability can be exploited by leveraging a SQL parsing vulnerability.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bit-superset-2023-32672</guid>
    </item>
    <item>
      <title>cnvd-2023-72237</title>
      <link>https://cve.radiocsirt.org/vuln/cnvd-2023-72237</link>
      <description>cnvd-2023-72237</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cnvd-2023-72237</guid>
    </item>
    <item>
      <title>EUVD-2026-188901</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-188901</link>
      <description>EUVD-2026-188901</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-188901</guid>
    </item>
    <item>
      <title>fkie_cve-2023-32672</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2023-32672</link>
      <description>&lt;p&gt;An Incorrect authorisation check in SQLLab in Apache Superset versions up to and including 2.1.0. This vulnerability allows an authenticated user to query tables that they do not have proper access to within Superset. The vulnerability can be exploited by leveraging a SQL parsing vulnerability.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;An Incorrect authorisation check in SQLLab in Apache Superset versions up to and including 2.1.0. This vulnerability allows an authenticated user to query tables that they do not have proper access to within Superset. The vulnerability can be exploited by leveraging a SQL parsing vulnerability.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2023-32672</guid>
    </item>
    <item>
      <title>GHSA-95ch-p3gw-23qg — Apache Superset has incorrect authorization check</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-95ch-p3gw-23qg</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; PyPI: apache-superset&lt;/p&gt;
&lt;p&gt;An Incorrect authorisation check in SQLLab in Apache Superset versions up to and including 2.1.0. This vulnerability allows an authenticated user to query tables that they do not have proper access to within Superset. The vulnerability can be exploited by leveraging a SQL parsing vulnerability.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; PyPI: apache-superset&lt;/p&gt;
&lt;p&gt;An Incorrect authorisation check in SQLLab in Apache Superset versions up to and including 2.1.0. This vulnerability allows an authenticated user to query tables that they do not have proper access to within Superset. The vulnerability can be exploited by leveraging a SQL parsing vulnerability.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-95ch-p3gw-23qg</guid>
    </item>
    <item>
      <title>gsd-2023-32672</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2023-32672</link>
      <description>gsd-2023-32672</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2023-32672</guid>
    </item>
    <item>
      <title>PYSEC-2026-1166 — Apache Superset has incorrect authorization check</title>
      <link>https://cve.radiocsirt.org/vuln/pysec-2026-1166</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; PyPI: apache-superset&lt;/p&gt;
&lt;p&gt;An Incorrect authorisation check in SQLLab in Apache Superset versions up to and including 2.1.0. This vulnerability allows an authenticated user to query tables that they do not have proper access to within Superset. The vulnerability can be exploited by leveraging a SQL parsing vulnerability.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; PyPI: apache-superset&lt;/p&gt;
&lt;p&gt;An Incorrect authorisation check in SQLLab in Apache Superset versions up to and including 2.1.0. This vulnerability allows an authenticated user to query tables that they do not have proper access to within Superset. The vulnerability can be exploited by leveraging a SQL parsing vulnerability.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/pysec-2026-1166</guid>
    </item>
  </channel>
</rss>
