apache-superset vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-23984Highapache-superset: Apache Superset: Read-Only Bypass via Improper Input Validation on PostgreSQL Connections CVE-2026-23980Mediumapache-superset: Apache Superset allows privileged users to conduct error-based SQL Injection CVE-2026-23982Highapache-superset: Apache Superset Improper Authorization allows low-privileged users to bypass access controls CVE-2026-23969Mediumapache-superset: Apache Superset: Incomplete DISALLOWED_SQL_FUNCTIONS default list for ClickHouse engine CVE-2026-23983Lowapache-superset: Apache Superset allows authenticated users to view sensitive data without explicit permissions CVE-2025-55675Mediumapache-superset: Apache Superset allows authenticated users to discover metadata about datasources they don't have permission to access CVE-2025-55672Mediumapache-superset: Apache Superset's chart visualization has a stored Cross-Site Scripting (XSS) vulnerability CVE-2025-55673Mediumapache-superset: Apache Superset data query improperly discloses database schema information to low-privileged guest user CVE-2025-55674Mediumapache-superset: Apache Superset has bypass of `DISALLOWED_SQL_FUNCTIONS` that allows execution of blocked SQL functions CVE-2025-48912Highapache-superset: Apache Superset: Improper authorization bypass on row level security via SQL Injection CVE-2025-27696Mediumapache-superset: Apache Superset Allows Ownership Takeover CVE-2024-55633Highapache-superset: Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access CVE-2024-53947Lowapache-superset: Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions CVE-2024-53949Highapache-superset: Apache Superset: Lower privilege users are able to create Role when FAB_ADD_SECURITY_API is enabled CVE-2024-53948Mediumapache-superset: Apache Superset: Error verbosity exposes metadata in analytics databases CVE-2024-39887Mediumapache-superset: Apache Superset vulnerable to improper SQL authorization CVE-2024-34693Mediumapache-superset: Apache Superset server arbitrary file read CVE-2024-28148Mediumapache-superset: Apache Superset Incorrect Authorization vulnerability CVE-2024-24779Mediumapache-superset: Apache Superset: Improper data authorization when creating a new dataset CVE-2024-26016Mediumapache-superset: Apache Superset: Improper authorization validation on dashboards and charts import CVE-2024-24773Mediumapache-superset: Apache Superset: Improper validation of SQL statements allows for unauthorized access to data CVE-2024-24772Mediumapache-superset: Apache Superset: Improper Neutralization of custom SQL on embedded context CVE-2024-27315Mediumapache-superset: Apache Superset: Improper error handling on alerts CVE-2023-49657Criticalapache-superset: Cross-site Scripting in Apache superset CVE-2023-46104Mediumapache-superset: Apache Superset uncontrolled resource consumption

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo