Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2021-28125

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-pfwg-rxf4-97c3

Open Redirect in Apache Superset Apache Superset prior to 1.1.0 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.

gitlab/pypi/superset/CVE-2021-28125

URL Redirection to Untrusted Site (Open Redirect) Apache Superset allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.

pypa/superset/PYSEC-2026-3078

Open Redirect in Apache Superset Apache Superset prior to 1.1.0 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.

pysec/PYSEC-2026-3078

Open Redirect in Apache Superset Apache Superset prior to 1.1.0 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.