Vulnerabilities

Improper payload validation and an improper REST API response type, made it possible for an authenticated malicious actor to store malicious code into Chart's metadata, this code could get executed if a user specifically…

Unnecessary read permissions within the Gamma role would allow authenticated users to read configured CSS templates and annotations.

Improper authorization check and possible privilege escalation on Apache Superset up to but excluding 2.1.2.