Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2024-28148

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-299q-3p96-5898

Apache Superset Incorrect Authorization vulnerability An authenticated user could potentially access metadata for a datasource they are not authorized to view by submitting a targeted REST API request. This issue affects Apache Superset before 3.1.2. Users are recommended to upgrade to version 3.1.2 or above, which fixes the issue.

gitlab/pypi/apache-superset/CVE-2024-28148

Apache Superset Incorrect Authorization vulnerability An authenticated user could potentially access metadata for a datasource they are not authorized to view by submitting a targeted REST API request. This issue affects Apache Superset before 4.0.0. Users are recommended to upgrade to version 4.0.0, which fixes the issue.

pypa/apache-superset/PYSEC-2026-1153

Apache Superset Incorrect Authorization vulnerability An authenticated user could potentially access metadata for a datasource they are not authorized to view by submitting a targeted REST API request. This issue affects Apache Superset before 3.1.2. Users are recommended to upgrade to version 3.1.2 or above, which fixes the issue.

pysec/PYSEC-2026-1153

Apache Superset Incorrect Authorization vulnerability An authenticated user could potentially access metadata for a datasource they are not authorized to view by submitting a targeted REST API request. This issue affects Apache Superset before 3.1.2. Users are recommended to upgrade to version 3.1.2 or above, which fixes the issue.