[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcdWpKGhn9UCV-047lfNdKlPhLHvLPvFnsUo95K7vxyc":3,"g5a-family:apache\u002Fsuperset":518,"g5a-ex:apache\u002Fsuperset@*":519},{"success":4,"data":5},true,{"product":6,"versions":290,"topVulnerabilitiesByEpss":427,"kevVulnerabilities":490,"seoMetadata":496,"meta":515},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":289},"apache","superset",136,62,1,"2025-08-14",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,130,132,134,136,138,140,142,144,146,148,150,152,154,156,158,160,162,164,166,168,170,172,174,176,178,180,182,184,186,188,190,192,194,196,198,200,202,204,206,208,210,212,214,216,218,220,222,224,226,228,230,232,234,236,238,240,243,245,247,249,251,253,255,257,259,261,263,265,267,269,271,273,275,277,279,281,283,285,287],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"0.10.0",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"0.11.0",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"0.12.0",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"0.13.0",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"0.13.1",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"0.13.2",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"0.14.0",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"0.14.1",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"0.15.0",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"0.15.1",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"0.15.2",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"0.15.3",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"0.15.4",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"0.15.4.1",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"0.16.0",{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},"0.16.1",{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"0.17.0",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"0.17.1",{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},"0.17.2",{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},"0.17.3",{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},"0.17.4",{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},"0.17.5",{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},"0.17.6",{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},"0.18.0",{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},"0.18.2",{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},"0.18.3",{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},"0.18.4",{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},"0.18.5",{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},"0.19.0",{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},"0.19.1",{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},"0.2.0",{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},"0.20.0",{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},"0.20.1",{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},"0.20.2",{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},"0.20.3",{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},"0.20.4",{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},"0.20.5",{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},"0.20.6",{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},"0.2.1",{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},"0.21.0",{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},"0.21.1",{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},"0.21.2",{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},"0.22.0",{"version":103,"cve_count":16,"kev_count":16,"has_kev":17},"0.22.1",{"version":105,"cve_count":16,"kev_count":16,"has_kev":17},"0.23.0",{"version":107,"cve_count":16,"kev_count":16,"has_kev":17},"0.23.1",{"version":109,"cve_count":16,"kev_count":16,"has_kev":17},"0.23.2",{"version":111,"cve_count":16,"kev_count":16,"has_kev":17},"0.23.3",{"version":113,"cve_count":16,"kev_count":16,"has_kev":17},"0.24.0",{"version":115,"cve_count":16,"kev_count":16,"has_kev":17},"0.25.0",{"version":117,"cve_count":16,"kev_count":16,"has_kev":17},"0.25.1",{"version":119,"cve_count":16,"kev_count":16,"has_kev":17},"0.25.2",{"version":121,"cve_count":16,"kev_count":16,"has_kev":17},"0.25.3",{"version":123,"cve_count":16,"kev_count":16,"has_kev":17},"0.25.4",{"version":125,"cve_count":16,"kev_count":16,"has_kev":17},"0.25.5",{"version":127,"cve_count":16,"kev_count":16,"has_kev":17},"0.25.6",{"version":129,"cve_count":16,"kev_count":16,"has_kev":17},"0.26.0",{"version":131,"cve_count":16,"kev_count":16,"has_kev":17},"0.26.1",{"version":133,"cve_count":16,"kev_count":16,"has_kev":17},"0.26.2",{"version":135,"cve_count":16,"kev_count":16,"has_kev":17},"0.26.3",{"version":137,"cve_count":16,"kev_count":16,"has_kev":17},"0.27.0",{"version":139,"cve_count":16,"kev_count":16,"has_kev":17},"0.28.0",{"version":141,"cve_count":16,"kev_count":16,"has_kev":17},"0.28.1",{"version":143,"cve_count":16,"kev_count":16,"has_kev":17},"0.29.0",{"version":145,"cve_count":16,"kev_count":16,"has_kev":17},"0.31",{"version":147,"cve_count":16,"kev_count":16,"has_kev":17},"0.31.0",{"version":149,"cve_count":16,"kev_count":16,"has_kev":17},"0.32",{"version":151,"cve_count":16,"kev_count":16,"has_kev":17},"0.32.0",{"version":153,"cve_count":16,"kev_count":16,"has_kev":17},"0.33.0",{"version":155,"cve_count":11,"kev_count":16,"has_kev":17},"0.34.0",{"version":157,"cve_count":11,"kev_count":16,"has_kev":17},"0.34.1",{"version":159,"cve_count":11,"kev_count":16,"has_kev":17},"0.35.0",{"version":161,"cve_count":11,"kev_count":16,"has_kev":17},"0.35.1",{"version":163,"cve_count":16,"kev_count":16,"has_kev":17},"0.35.2",{"version":165,"cve_count":16,"kev_count":16,"has_kev":17},"0.36.0",{"version":167,"cve_count":16,"kev_count":16,"has_kev":17},"0.37.0",{"version":169,"cve_count":16,"kev_count":16,"has_kev":17},"0.37.1",{"version":171,"cve_count":16,"kev_count":16,"has_kev":17},"0.37.2",{"version":173,"cve_count":16,"kev_count":16,"has_kev":17},"0.38.0",{"version":175,"cve_count":16,"kev_count":16,"has_kev":17},"0.38.1",{"version":177,"cve_count":16,"kev_count":16,"has_kev":17},"0.4.0",{"version":179,"cve_count":16,"kev_count":16,"has_kev":17},"0.5.0",{"version":181,"cve_count":16,"kev_count":16,"has_kev":17},"0.5.1",{"version":183,"cve_count":16,"kev_count":16,"has_kev":17},"0.5.2",{"version":185,"cve_count":16,"kev_count":16,"has_kev":17},"0.5.3",{"version":187,"cve_count":16,"kev_count":16,"has_kev":17},"0.6.0",{"version":189,"cve_count":16,"kev_count":16,"has_kev":17},"0.6.1",{"version":191,"cve_count":16,"kev_count":16,"has_kev":17},"0.7.0",{"version":193,"cve_count":16,"kev_count":16,"has_kev":17},"0.8.0",{"version":195,"cve_count":16,"kev_count":16,"has_kev":17},"0.8.1",{"version":197,"cve_count":16,"kev_count":16,"has_kev":17},"0.8.2",{"version":199,"cve_count":16,"kev_count":16,"has_kev":17},"0.8.3",{"version":201,"cve_count":16,"kev_count":16,"has_kev":17},"0.8.4",{"version":203,"cve_count":16,"kev_count":16,"has_kev":17},"0.8.5",{"version":205,"cve_count":16,"kev_count":16,"has_kev":17},"0.8.6",{"version":207,"cve_count":16,"kev_count":16,"has_kev":17},"0.8.7",{"version":209,"cve_count":16,"kev_count":16,"has_kev":17},"0.8.8",{"version":211,"cve_count":16,"kev_count":16,"has_kev":17},"0.8.9",{"version":213,"cve_count":16,"kev_count":16,"has_kev":17},"0.9.0",{"version":215,"cve_count":16,"kev_count":16,"has_kev":17},"0.9.1",{"version":217,"cve_count":16,"kev_count":16,"has_kev":17},"1.0.0",{"version":219,"cve_count":16,"kev_count":16,"has_kev":17},"1.0.1",{"version":221,"cve_count":16,"kev_count":16,"has_kev":17},"1.1.0",{"version":223,"cve_count":16,"kev_count":16,"has_kev":17},"1.2.0",{"version":225,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.0",{"version":227,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.1",{"version":229,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.2",{"version":231,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.0",{"version":233,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.1",{"version":235,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.2",{"version":237,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.0",{"version":239,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.1",{"version":241,"cve_count":242,"kev_count":16,"has_kev":17},"2.0.0",7,{"version":244,"cve_count":16,"kev_count":16,"has_kev":17},"2.0.1",{"version":246,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.0",{"version":248,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.1",{"version":250,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.2",{"version":252,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.3",{"version":254,"cve_count":16,"kev_count":16,"has_kev":17},"3.0.0",{"version":256,"cve_count":16,"kev_count":16,"has_kev":17},"3.0.1",{"version":258,"cve_count":16,"kev_count":16,"has_kev":17},"3.0.2",{"version":260,"cve_count":16,"kev_count":16,"has_kev":17},"3.0.3",{"version":262,"cve_count":16,"kev_count":16,"has_kev":17},"3.1.0",{"version":264,"cve_count":16,"kev_count":16,"has_kev":17},"3.1.1",{"version":266,"cve_count":16,"kev_count":16,"has_kev":17},"3.1.2",{"version":268,"cve_count":16,"kev_count":16,"has_kev":17},"3.1.3",{"version":270,"cve_count":16,"kev_count":16,"has_kev":17},"4.0.0",{"version":272,"cve_count":16,"kev_count":16,"has_kev":17},"4.0.1",{"version":274,"cve_count":16,"kev_count":16,"has_kev":17},"4.0.2",{"version":276,"cve_count":16,"kev_count":16,"has_kev":17},"4.1.0",{"version":278,"cve_count":16,"kev_count":16,"has_kev":17},"4.1.1",{"version":280,"cve_count":16,"kev_count":16,"has_kev":17},"4.1.2",{"version":282,"cve_count":16,"kev_count":16,"has_kev":17},"4.1.3",{"version":284,"cve_count":16,"kev_count":16,"has_kev":17},"5.0.0",{"version":286,"cve_count":16,"kev_count":16,"has_kev":17},"6.0.0",{"version":288,"cve_count":16,"kev_count":16,"has_kev":17},"6.0.1","Superset by Apache is a technology product with 136 tracked versions and 62 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},{"version":103,"cve_count":16,"kev_count":16,"has_kev":17},{"version":105,"cve_count":16,"kev_count":16,"has_kev":17},{"version":107,"cve_count":16,"kev_count":16,"has_kev":17},{"version":109,"cve_count":16,"kev_count":16,"has_kev":17},{"version":111,"cve_count":16,"kev_count":16,"has_kev":17},{"version":113,"cve_count":16,"kev_count":16,"has_kev":17},{"version":115,"cve_count":16,"kev_count":16,"has_kev":17},{"version":117,"cve_count":16,"kev_count":16,"has_kev":17},{"version":119,"cve_count":16,"kev_count":16,"has_kev":17},{"version":121,"cve_count":16,"kev_count":16,"has_kev":17},{"version":123,"cve_count":16,"kev_count":16,"has_kev":17},{"version":125,"cve_count":16,"kev_count":16,"has_kev":17},{"version":127,"cve_count":16,"kev_count":16,"has_kev":17},{"version":129,"cve_count":16,"kev_count":16,"has_kev":17},{"version":131,"cve_count":16,"kev_count":16,"has_kev":17},{"version":133,"cve_count":16,"kev_count":16,"has_kev":17},{"version":135,"cve_count":16,"kev_count":16,"has_kev":17},{"version":137,"cve_count":16,"kev_count":16,"has_kev":17},{"version":139,"cve_count":16,"kev_count":16,"has_kev":17},{"version":141,"cve_count":16,"kev_count":16,"has_kev":17},{"version":143,"cve_count":16,"kev_count":16,"has_kev":17},{"version":145,"cve_count":16,"kev_count":16,"has_kev":17},{"version":147,"cve_count":16,"kev_count":16,"has_kev":17},{"version":149,"cve_count":16,"kev_count":16,"has_kev":17},{"version":151,"cve_count":16,"kev_count":16,"has_kev":17},{"version":153,"cve_count":16,"kev_count":16,"has_kev":17},{"version":155,"cve_count":11,"kev_count":16,"has_kev":17},{"version":157,"cve_count":11,"kev_count":16,"has_kev":17},{"version":159,"cve_count":11,"kev_count":16,"has_kev":17},{"version":161,"cve_count":11,"kev_count":16,"has_kev":17},{"version":163,"cve_count":16,"kev_count":16,"has_kev":17},{"version":165,"cve_count":16,"kev_count":16,"has_kev":17},{"version":167,"cve_count":16,"kev_count":16,"has_kev":17},{"version":169,"cve_count":16,"kev_count":16,"has_kev":17},{"version":171,"cve_count":16,"kev_count":16,"has_kev":17},{"version":173,"cve_count":16,"kev_count":16,"has_kev":17},{"version":175,"cve_count":16,"kev_count":16,"has_kev":17},{"version":177,"cve_count":16,"kev_count":16,"has_kev":17},{"version":179,"cve_count":16,"kev_count":16,"has_kev":17},{"version":181,"cve_count":16,"kev_count":16,"has_kev":17},{"version":183,"cve_count":16,"kev_count":16,"has_kev":17},{"version":185,"cve_count":16,"kev_count":16,"has_kev":17},{"version":187,"cve_count":16,"kev_count":16,"has_kev":17},{"version":189,"cve_count":16,"kev_count":16,"has_kev":17},{"version":191,"cve_count":16,"kev_count":16,"has_kev":17},{"version":193,"cve_count":16,"kev_count":16,"has_kev":17},{"version":195,"cve_count":16,"kev_count":16,"has_kev":17},{"version":197,"cve_count":16,"kev_count":16,"has_kev":17},{"version":199,"cve_count":16,"kev_count":16,"has_kev":17},{"version":201,"cve_count":16,"kev_count":16,"has_kev":17},{"version":203,"cve_count":16,"kev_count":16,"has_kev":17},{"version":205,"cve_count":16,"kev_count":16,"has_kev":17},{"version":207,"cve_count":16,"kev_count":16,"has_kev":17},{"version":209,"cve_count":16,"kev_count":16,"has_kev":17},{"version":211,"cve_count":16,"kev_count":16,"has_kev":17},{"version":213,"cve_count":16,"kev_count":16,"has_kev":17},{"version":215,"cve_count":16,"kev_count":16,"has_kev":17},{"version":217,"cve_count":16,"kev_count":16,"has_kev":17},{"version":219,"cve_count":16,"kev_count":16,"has_kev":17},{"version":221,"cve_count":16,"kev_count":16,"has_kev":17},{"version":223,"cve_count":16,"kev_count":16,"has_kev":17},{"version":225,"cve_count":16,"kev_count":16,"has_kev":17},{"version":227,"cve_count":16,"kev_count":16,"has_kev":17},{"version":229,"cve_count":16,"kev_count":16,"has_kev":17},{"version":231,"cve_count":16,"kev_count":16,"has_kev":17},{"version":233,"cve_count":16,"kev_count":16,"has_kev":17},{"version":235,"cve_count":16,"kev_count":16,"has_kev":17},{"version":237,"cve_count":16,"kev_count":16,"has_kev":17},{"version":239,"cve_count":16,"kev_count":16,"has_kev":17},{"version":241,"cve_count":242,"kev_count":16,"has_kev":17},{"version":244,"cve_count":16,"kev_count":16,"has_kev":17},{"version":246,"cve_count":16,"kev_count":16,"has_kev":17},{"version":248,"cve_count":16,"kev_count":16,"has_kev":17},{"version":250,"cve_count":16,"kev_count":16,"has_kev":17},{"version":252,"cve_count":16,"kev_count":16,"has_kev":17},{"version":254,"cve_count":16,"kev_count":16,"has_kev":17},{"version":256,"cve_count":16,"kev_count":16,"has_kev":17},{"version":258,"cve_count":16,"kev_count":16,"has_kev":17},{"version":260,"cve_count":16,"kev_count":16,"has_kev":17},{"version":262,"cve_count":16,"kev_count":16,"has_kev":17},{"version":264,"cve_count":16,"kev_count":16,"has_kev":17},{"version":266,"cve_count":16,"kev_count":16,"has_kev":17},{"version":268,"cve_count":16,"kev_count":16,"has_kev":17},{"version":270,"cve_count":16,"kev_count":16,"has_kev":17},{"version":272,"cve_count":16,"kev_count":16,"has_kev":17},{"version":274,"cve_count":16,"kev_count":16,"has_kev":17},{"version":276,"cve_count":16,"kev_count":16,"has_kev":17},{"version":278,"cve_count":16,"kev_count":16,"has_kev":17},{"version":280,"cve_count":16,"kev_count":16,"has_kev":17},{"version":282,"cve_count":16,"kev_count":16,"has_kev":17},{"version":284,"cve_count":16,"kev_count":16,"has_kev":17},{"version":286,"cve_count":16,"kev_count":16,"has_kev":17},{"version":288,"cve_count":16,"kev_count":16,"has_kev":17},[428,436,443,449,455,463,468,473,479,485],{"cveId":429,"description":430,"publishedDate":431,"cvssScore":432,"cvssVersion":433,"severity":434,"isKev":4,"epssScore":435},"CVE-2023-27524","Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config.\n\nAll superset installations should always set a unique secure random SECRET_KEY. Your SECRET_KEY is used to securely sign all session cookies and encrypting sensitive information on the database.\nAdd a strong SECRET_KEY to your `superset_config.py` file like:\n\nSECRET_KEY = \u003CYOUR_OWN_RANDOM_GENERATED_SECRET_KEY>\n\nAlternatively you can set it with `SUPERSET_SECRET_KEY` environment variable.\n","2023-04-24",8.9,"v3.1","High",0.97405,{"cveId":437,"description":438,"publishedDate":439,"cvssScore":440,"cvssVersion":433,"severity":441,"isKev":17,"epssScore":442},"CVE-2021-27907","Apache Superset up to and including 0.38.0 allowed the creation of a Markdown component on a Dashboard page for describing chart's related information. Abusing this functionality, a malicious user could inject javascript code executing unwanted action in the context of the user's browser. The javascript code will be automatically executed (Stored XSS) when a legitimate user surfs on the dashboard page. The vulnerability is exploitable creating a “div” section and embedding in it a “svg” element with javascript code.","2021-03-05",5.4,"Medium",0.86393,{"cveId":444,"description":445,"publishedDate":446,"cvssScore":447,"cvssVersion":433,"severity":441,"isKev":17,"epssScore":448},"CVE-2023-39265","Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Additionally, if Apache Superset is using a SQLite database for its metadata (not advised for production use) it could result in more severe vulnerabilities related to confidentiality and integrity. This vulnerability exists in Apache Superset versions up to and including 2.1.0.","2023-09-06",6.5,0.83716,{"cveId":450,"description":451,"publishedDate":452,"cvssScore":453,"cvssVersion":433,"severity":441,"isKev":17,"epssScore":454},"CVE-2021-28125","Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.","2021-04-27",6.1,0.63768,{"cveId":456,"description":457,"publishedDate":458,"cvssScore":459,"cvssVersion":460,"severity":461,"isKev":17,"epssScore":462},"CVE-2018-8021","Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code execution. Note Superset 0.23 was released prior to any Superset release under the Apache Software Foundation.","2018-11-07",9.8,"v3.0","Critical",0.53934,{"cveId":464,"description":465,"publishedDate":446,"cvssScore":466,"cvssVersion":433,"severity":441,"isKev":17,"epssScore":467},"CVE-2023-37941","If an attacker gains write access to the Apache Superset metadata database, they could persist a specifically crafted Python object that may lead to remote code execution on Superset's web backend.\n\nThe Superset metadata db is an 'internal' component that is typically \nonly accessible directly by the system administrator and the superset \nprocess itself. Gaining access to that database should\n be difficult and require significant privileges.\n\nThis vulnerability impacts Apache Superset versions 1.5.0 up to and including 2.1.0. Users are recommended to upgrade to version 2.1.1 or later.",6.6,0.29226,{"cveId":469,"description":470,"publishedDate":471,"cvssScore":447,"cvssVersion":433,"severity":441,"isKev":17,"epssScore":472},"CVE-2021-44451","Apache Superset up to and including 1.3.2 allowed for registered database connections password leak for authenticated users. This information could be accessed in a non-trivial way. Users should upgrade to Apache Superset 1.4.0 or higher.","2022-02-01",0.07863,{"cveId":474,"description":475,"publishedDate":476,"cvssScore":477,"cvssVersion":433,"severity":441,"isKev":17,"epssScore":478},"CVE-2024-39887","An SQL Injection vulnerability in Apache Superset exists due to improper neutralization of special elements used in SQL commands. Specifically, certain engine-specific functions are not checked, which allows attackers to bypass Apache Superset's SQL authorization. To mitigate this, a new configuration key named DISALLOWED_SQL_FUNCTIONS has been introduced. This key disallows the use of the following PostgreSQL functions: version, query_to_xml, inet_server_addr, and inet_client_addr. Additional functions can be added to this list for increased protection.\n\nThis issue affects Apache Superset: before 4.0.2.\n\nUsers are recommended to upgrade to version 4.0.2, which fixes the issue.","2024-07-16",4.3,0.04433,{"cveId":480,"description":481,"publishedDate":482,"cvssScore":483,"cvssVersion":433,"severity":434,"isKev":17,"epssScore":484},"CVE-2020-13948","While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests via a number of templated text fields in the product that would allow arbitrary access to Python’s `os` package in the web application process in versions \u003C 0.37.1. It was thus possible for an authenticated user to list and access files, environment variables, and process information. Additionally it was possible to set environment variables for the current process, create and update files in folders writable by the web process, and execute arbitrary programs accessible by the web process. All other operations available to the `os` package in Python were also available, even if not explicitly enumerated in this CVE.","2020-09-17",8.8,0.03076,{"cveId":486,"description":487,"publishedDate":488,"cvssScore":459,"cvssVersion":433,"severity":461,"isKev":17,"epssScore":489},"CVE-2022-27479","Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue.","2022-04-13",0.02788,[491],{"cveId":429,"description":430,"publishedDate":431,"cvssScore":432,"severity":434,"isKev":4,"epssScore":435,"cisaVulnName":492,"cisaDateAdded":493,"cisaShortDescription":494,"cisaRequiredAction":495},"Apache Superset Insecure Default Initialization of Resource Vulnerability","2024-01-08","Apache Superset contains an insecure default initialization of a resource vulnerability that allows an attacker to authenticate and access unauthorized resources on installations that have not altered the default configured SECRET_KEY according to installation instructions.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":497,"metaDescription":498,"keywords":499,"structuredData":500},"Superset by Apache - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Superset by Apache covering 136 versions with 62 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Superset vulnerabilities, Superset security, Superset CVE, Apache Superset, Superset threat intelligence, Apache security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Superset KEV, Superset exploited vulnerabilities",{"@context":501,"@type":502,"name":503,"description":498,"url":504,"manufacturer":505,"applicationCategory":509,"softwareVersion":510,"mainEntity":511},"https:\u002F\u002Fschema.org","SoftwareApplication","Superset","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapache\u002Fsuperset",{"@type":506,"name":507,"url":508},"Organization","Apache","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fapache","Security Software","136 versions tracked",{"@type":512,"name":513,"description":514,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Superset Security Vulnerabilities","Security vulnerabilities affecting Superset by Apache",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":516,"apiVersion":517},"2026-10-28T13:51:32.646Z","3.0",[],{"rows":520,"total":11,"capped":17,"failed":16},[521],{"cveId":429,"name":492,"severity":434,"cvss":432,"added":493,"epss":435,"published":522,"ranges":523,"checked":4,"hits":525,"covers":17},"2023-04-24T16:15:07.843",[524],"up to 2.0.1",[]]