https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 19:01:35 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-11311 bdu:2024-11311 https://cve.radiocsirt.org/vuln/bdu:2024-11311 https://cve.radiocsirt.org/vuln/bit-superset-2024-55633 <p><strong>Affected:</strong> Bitnami: superset</p> <p>Improper Authorization vulnerability in Apache Superset. On Postgres analytic databases an attacker with SQLLab access can craft a specially designed SQL DML statement that is Incorrectly identified as a read-only query, enabling its execution. Non postgres analytics database connections and postgres analytics database connections set with a readonly user (advised) are not vulnerable.</p> <p>This issue affects Apache Superset: before 4.1.0.</p> <p>Users are recommended to upgrade to version 4.1.0, which fixes the issue.</p> <p><strong>Affected:</strong> Bitnami: superset</p> <p>Improper Authorization vulnerability in Apache Superset. On Postgres analytic databases an attacker with SQLLab access can craft a specially designed SQL DML statement that is Incorrectly identified as a read-only query, enabling its execution. Non postgres analytics database connections and postgres analytics database connections set with a readonly user (advised) are not vulnerable.</p> <p>This issue affects Apache Superset: before 4.1.0.</p> <p>Users are recommended to upgrade to version 4.1.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/bit-superset-2024-55633 https://cve.radiocsirt.org/vuln/euvd-2026-214802 EUVD-2026-214802 https://cve.radiocsirt.org/vuln/euvd-2026-214802 https://cve.radiocsirt.org/vuln/fkie_cve-2024-55633 <p>Improper Authorization vulnerability in Apache Superset. On Postgres analytic databases an attacker with SQLLab access can craft a specially designed SQL DML statement that is Incorrectly identified as a read-only query, enabling its execution. Non postgres analytics database connections and postgres analytics database connections set with a readonly user (advised) are not vulnerable.</p> <p>This issue affects Apache Superset: before 4.1.0.</p> <p>Users are recommended to upgrade to version 4.1.0, which fixes the issue.</p> <p>Improper Authorization vulnerability in Apache Superset. On Postgres analytic databases an attacker with SQLLab access can craft a specially designed SQL DML statement that is Incorrectly identified as a read-only query, enabling its execution. Non postgres analytics database connections and postgres analytics database connections set with a readonly user (advised) are not vulnerable.</p> <p>This issue affects Apache Superset: before 4.1.0.</p> <p>Users are recommended to upgrade to version 4.1.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-55633 https://cve.radiocsirt.org/vuln/ghsa-787v-v9vq-4rgv <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Improper Authorization vulnerability in Apache Superset. On Postgres analytic databases an attacker with SQLLab access can craft a specially designed SQL DML statement that is Incorrectly identified as a read-only query, enabling its execution. Non postgres analytics database connections and postgres analytics database connections set with a readonly user (advised) are not vulnerable.</p> <p>This issue affects Apache Superset: before 4.1.0.</p> <p>Users are recommended to upgrade to version 4.1.0, which fixes the issue.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Improper Authorization vulnerability in Apache Superset. On Postgres analytic databases an attacker with SQLLab access can craft a specially designed SQL DML statement that is Incorrectly identified as a read-only query, enabling its execution. Non postgres analytics database connections and postgres analytics database connections set with a readonly user (advised) are not vulnerable.</p> <p>This issue affects Apache Superset: before 4.1.0.</p> <p>Users are recommended to upgrade to version 4.1.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-787v-v9vq-4rgv https://cve.radiocsirt.org/vuln/pysec-2026-1162 <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Improper Authorization vulnerability in Apache Superset. On Postgres analytic databases an attacker with SQLLab access can craft a specially designed SQL DML statement that is Incorrectly identified as a read-only query, enabling its execution. Non postgres analytics database connections and postgres analytics database connections set with a readonly user (advised) are not vulnerable.</p> <p>This issue affects Apache Superset: before 4.1.0.</p> <p>Users are recommended to upgrade to version 4.1.0, which fixes the issue.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Improper Authorization vulnerability in Apache Superset. On Postgres analytic databases an attacker with SQLLab access can craft a specially designed SQL DML statement that is Incorrectly identified as a read-only query, enabling its execution. Non postgres analytics database connections and postgres analytics database connections set with a readonly user (advised) are not vulnerable.</p> <p>This issue affects Apache Superset: before 4.1.0.</p> <p>Users are recommended to upgrade to version 4.1.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/pysec-2026-1162 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3698 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache Superset ausnutzen, um Dateien zu manipulieren.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache Superset ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3698