Apache Superset 6.0.0 addresses high-severity flaws, including a PostgreSQL read-only bypass and dataset access control leaks. Secure your BI platform today!
Apache Superset
A SQL injection vulnerability (CVE-2025-48912) in Apache Superset allows authenticated attackers to bypass row-level security, exposing sensitive data.
Find out about the high-severity vulnerability CVE-2024-55633 in Apache Superset, allowing attackers to bypass read-only restrictions and modify data.
Stay safe with Apache Superset 4.1.0 update. Learn about the critical security vulnerabilities and how to protect your sensitive data.
Find out how the Apache Superset vulnerability (CVE-2024-34693) can be exploited and the potential consequences for your server.
Apache Superset has released fixes to fix a critical CVE-2023-49657 vulnerability that could lead to stored cross-site scripting attacks.
CVE-2023-49734 vulnerability allows a lower-privileged user, or 'Gamma user,' to gain undue control over chart permissions.
Jakabakos has shed light on the specifics of the CVE-2023-27524 flaw and provided a PoC, accentuating its potential for remote code execution
A series of vulnerabilities, ripe for exploitation, have surfaced in Apache Superset. These span from remote code execution risks
A critical-severity SQL injection vulnerability in the SQL Alchemy connector of Superset (CVE-2022-41703) was said to affect version 1.5.2