Skip to content
OpenAdvisories
Low WID-SEC-2026-2603 2 CVEs

Apache Superset: Mehrere Schwachstellen

Published Jul 30, 2026 · Updated Jul 30, 2026 · de-DE

Vendor: Apache Product: Superset Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Superset ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service zu verursachen.

Product

Apache Superset ist eine Open-Source-Plattform zur Datenexploration und -visualisierung.

Vulnerabilities 2

  • Medium 5.3
    CVE-2026-23981

    Apache Superset: Improper Authorization in Chart Update allowing Dashboard Modification

    An Improper Authorization vulnerability exists in Apache Superset allowing an authenticated user with permissions to update charts to modify dashboards they do not own. When updating a chart's properties via the REST API, a user can provide a list of dashboar…

    Apache Software Foundation Apache Superset
  • Medium 5.3
    CVE-2026-23985

    Apache Superset: Regular Expression Denial of Service (ReDoS) in SQL Parser

    A Regular Expression Denial of Service (ReDoS) vulnerability exists in Apache Superset versions 1.5.0 through 5.0.0. The vulnerability is located in the sql_parse.py component, specifically within the SQL_REGEX used for parsing SQL statements in the sqlparse …

    Apache Software Foundation Apache Superset

Revision history

  1. #1

    Initiale Fassung

References