https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 21:25:06 +0000 https://cve.radiocsirt.org/vuln/bit-superset-2024-27315 <p><strong>Affected:</strong> Bitnami: superset</p> <p>An authenticated user with privileges to create Alerts on Alerts &amp; Reports has the capability to generate a specially crafted SQL statement that triggers an error on the database. This error is not properly handled by Apache Superset and may inadvertently surface in the error log of the Alert exposing possibly sensitive data.</p> <p>This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> <p><strong>Affected:</strong> Bitnami: superset</p> <p>An authenticated user with privileges to create Alerts on Alerts &amp; Reports has the capability to generate a specially crafted SQL statement that triggers an error on the database. This error is not properly handled by Apache Superset and may inadvertently surface in the error log of the Alert exposing possibly sensitive data.</p> <p>This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/bit-superset-2024-27315 https://cve.radiocsirt.org/vuln/cnvd-2024-26186 cnvd-2024-26186 https://cve.radiocsirt.org/vuln/cnvd-2024-26186 https://cve.radiocsirt.org/vuln/euvd-2026-191827 EUVD-2026-191827 https://cve.radiocsirt.org/vuln/euvd-2026-191827 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27315 <p>An authenticated user with privileges to create Alerts on Alerts &amp; Reports has the capability to generate a specially crafted SQL statement that triggers an error on the database. This error is not properly handled by Apache Superset and may inadvertently surface in the error log of the Alert exposing possibly sensitive data.</p> <p>This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> <p>An authenticated user with privileges to create Alerts on Alerts &amp; Reports has the capability to generate a specially crafted SQL statement that triggers an error on the database. This error is not properly handled by Apache Superset and may inadvertently surface in the error log of the Alert exposing possibly sensitive data.</p> <p>This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-27315 https://cve.radiocsirt.org/vuln/ghsa-h7r6-8qmm-hj5r <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>An authenticated user with privileges to create Alerts on Alerts &amp; Reports has the capability to generate a specially crafted SQL statement that triggers an error on the database. This error is not properly handled by Apache Superset and may inadvertently surface in the error log of the Alert exposing possibly sensitive data.</p> <p>This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>An authenticated user with privileges to create Alerts on Alerts &amp; Reports has the capability to generate a specially crafted SQL statement that triggers an error on the database. This error is not properly handled by Apache Superset and may inadvertently surface in the error log of the Alert exposing possibly sensitive data.</p> <p>This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-h7r6-8qmm-hj5r https://cve.radiocsirt.org/vuln/gsd-2024-27315 gsd-2024-27315 https://cve.radiocsirt.org/vuln/gsd-2024-27315 https://cve.radiocsirt.org/vuln/pysec-2026-1181 <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>An authenticated user with privileges to create Alerts on Alerts &amp; Reports has the capability to generate a specially crafted SQL statement that triggers an error on the database. This error is not properly handled by Apache Superset and may inadvertently surface in the error log of the Alert exposing possibly sensitive data.</p> <p>This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> <p><strong>Affected:</strong> PyPI: apache-superset</p> <p>An authenticated user with privileges to create Alerts on Alerts &amp; Reports has the capability to generate a specially crafted SQL statement that triggers an error on the database. This error is not properly handled by Apache Superset and may inadvertently surface in the error log of the Alert exposing possibly sensitive data.</p> <p>This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.</p> <p>Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/pysec-2026-1181 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0515 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Superset ausnutzen, um Dateien zu manipulieren.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Superset ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0515