https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 22:27:02 +0000 https://cve.radiocsirt.org/vuln/bit-superset-2021-28125 <p><strong>Affected:</strong> Bitnami: superset</p> <p>Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.</p> <p><strong>Affected:</strong> Bitnami: superset</p> <p>Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.</p> https://cve.radiocsirt.org/vuln/bit-superset-2021-28125 https://cve.radiocsirt.org/vuln/cnvd-2021-38303 cnvd-2021-38303 https://cve.radiocsirt.org/vuln/cnvd-2021-38303 https://cve.radiocsirt.org/vuln/euvd-2026-25857 EUVD-2026-25857 https://cve.radiocsirt.org/vuln/euvd-2026-25857 https://cve.radiocsirt.org/vuln/fkie_cve-2021-28125 <p>Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.</p> <p>Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-28125 https://cve.radiocsirt.org/vuln/ghsa-pfwg-rxf4-97c3 <p><strong>Affected:</strong> PyPI: superset, PyPI: apache-superset</p> <p>Apache Superset prior to 1.1.0 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.</p> <p><strong>Affected:</strong> PyPI: superset, PyPI: apache-superset</p> <p>Apache Superset prior to 1.1.0 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.</p> https://cve.radiocsirt.org/vuln/ghsa-pfwg-rxf4-97c3 https://cve.radiocsirt.org/vuln/gsd-2021-28125 gsd-2021-28125 https://cve.radiocsirt.org/vuln/gsd-2021-28125 https://cve.radiocsirt.org/vuln/pysec-2021-128 <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.</p> https://cve.radiocsirt.org/vuln/pysec-2021-128