Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Apache Superset 6.0.0 Clear all filters
TI-2026-19322 CVE-2026-23980 · GHSA-gvxg-9hqx-f4rg

Apache Superset: Improper Neutralization of Special Elements used in a SQL Command

Priority LOW 25

Improper Neutralization of Special Elements used in a SQL Command ('SQL Injection') vulnerability in Apache Superset allows an authenticated user with read access to conduct error-based SQL injection via the sqlExpressio…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0071 Published 2026-02-24 Fixed in 6.0.0 CWE-89
TI-2026-19326 CVE-2026-23984 · GHSA-mwf2-qr4v-94h2

Apache Superset: SQLLab Read-Only Bypass on PostgreSQL

Priority LOW 31

An Improper Input Validation vulnerability exists in Apache Superset that allows an authenticated user with SQLLab access to bypass the read-only verification check when using a PostgreSQL database connection.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00409 Published 2026-02-24 Fixed in 6.0.0 CWE-863