Description
An authenticated user with Gamma role authorization could have access to metadata information using non trivial methods in Apache Superset up to and including 2.0.1
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache Superset | ≤ 2.0.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | apache-superset | <= 2.0.1 | — | GHSA-7jhg-8m74-6f6g |
| PyPI | apache-superset | < 2.1.0 | 2.1.0 | PYSEC-2026-1163 |
References
- https://lists.apache.org/thread/wpv7b17zjg2pmvpfkdd6nn8sco8y2q77 vendor-advisory