https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 02:53:28 +0000 https://cve.radiocsirt.org/vuln/cve-2023-37941 <p><strong>Affected:</strong> Apache Software Foundation Apache Superset, apache superset</p> <p>If an attacker gains write access to the Apache Superset metadata database, they could persist a specifically crafted Python object that may lead to remote code execution on Superset&#39;s web backend.</p> <p>The Superset metadata db is an &#39;internal&#39; component that is typically only accessible directly by the system administrator and the superset process itself. Gaining access to that database should be difficult and require significant privileges.</p> <p>This vulnerability impacts Apache Superset versions 1.5.0 up to and including 2.1.0. Users are recommended to upgrade to version 2.1.1 or later.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Superset, apache superset</p> <p>If an attacker gains write access to the Apache Superset metadata database, they could persist a specifically crafted Python object that may lead to remote code execution on Superset&#39;s web backend.</p> <p>The Superset metadata db is an &#39;internal&#39; component that is typically only accessible directly by the system administrator and the superset process itself. Gaining access to that database should be difficult and require significant privileges.</p> <p>This vulnerability impacts Apache Superset versions 1.5.0 up to and including 2.1.0. Users are recommended to upgrade to version 2.1.1 or later.</p> https://cve.radiocsirt.org/vuln/cve-2023-37941