https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 22:38:55 +0000 https://cve.radiocsirt.org/vuln/bit-superset-2022-43720 <p><strong>Affected:</strong> Bitnami: superset</p> <p>An authenticated attacker with write CSS template permissions can create a record with specific HTML tags that will not get properly escaped by the toast message displayed when a user deletes that specific CSS template record. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.</p> <p><strong>Affected:</strong> Bitnami: superset</p> <p>An authenticated attacker with write CSS template permissions can create a record with specific HTML tags that will not get properly escaped by the toast message displayed when a user deletes that specific CSS template record. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.</p> https://cve.radiocsirt.org/vuln/bit-superset-2022-43720 https://cve.radiocsirt.org/vuln/euvd-2026-227335 EUVD-2026-227335 https://cve.radiocsirt.org/vuln/euvd-2026-227335 https://cve.radiocsirt.org/vuln/fkie_cve-2022-43720 <p>An authenticated attacker with write CSS template permissions can create a record with specific HTML tags that will not get properly escaped by the toast message displayed when a user deletes that specific CSS template record. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.</p> <p>An authenticated attacker with write CSS template permissions can create a record with specific HTML tags that will not get properly escaped by the toast message displayed when a user deletes that specific CSS template record. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-43720 https://cve.radiocsirt.org/vuln/ghsa-fpmr-qmgh-42x2 <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>An authenticated attacker with write CSS template permissions can create a record with specific HTML tags that will not get properly escaped by the toast message displayed when a user deletes that specific CSS template record. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>An authenticated attacker with write CSS template permissions can create a record with specific HTML tags that will not get properly escaped by the toast message displayed when a user deletes that specific CSS template record. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.</p> https://cve.radiocsirt.org/vuln/ghsa-fpmr-qmgh-42x2 https://cve.radiocsirt.org/vuln/gsd-2022-43720 gsd-2022-43720 https://cve.radiocsirt.org/vuln/gsd-2022-43720 https://cve.radiocsirt.org/vuln/pysec-2026-782 <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>An authenticated attacker with write CSS template permissions can create a record with specific HTML tags that will not get properly escaped by the toast message displayed when a user deletes that specific CSS template record. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>An authenticated attacker with write CSS template permissions can create a record with specific HTML tags that will not get properly escaped by the toast message displayed when a user deletes that specific CSS template record. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.</p> https://cve.radiocsirt.org/vuln/pysec-2026-782