CVE-2026-23984

< 6.0.0

An Improper Input Validation vulnerability exists in Apache Superset that allows an authenticated user with SQLLab access to bypas

6.5MEDIUM

CVE-2026-23983

< 6.0.0

A Sensitive Data Exposure vulnerability exists in Apache Superset allowing authenticated users to retrieve sensitive user informat

6.5MEDIUM

CVE-2026-23982

< 6.0.0

An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls

6.5MEDIUM

CVE-2026-23980

< 6.0.0

Improper Neutralization of Special Elements used in a SQL Command ('SQL Injection') vulnerability in Apache Superset allows an aut

6.5MEDIUM

CVE-2026-23969

< 4.1.2

Apache Superset utilizes a configurable dictionary, DISALLOWED_SQL_FUNCTIONS, to restrict the execution of potentially sensitive S

6.5MEDIUM

CVE-2025-55675

< 5.0.0

Apache Superset contains an improper access control vulnerability in its /explore endpoint. A missing authorization check allows a

6.5MEDIUM

CVE-2025-55674

< 5.0.0

A bypass of the DISALLOWED_SQL_FUNCTIONS security feature in Apache Superset allows for the execution of blocked SQL functions. An

6.5MEDIUM

CVE-2025-55673

< 4.1.3

When a guest user accesses a chart in Apache Superset, the API response from the /chart/data endpoint includes a query field in it

4.3MEDIUM

CVE-2025-55672

< 5.0.0

A stored Cross-Site Scripting (XSS) vulnerability exists in Apache Superset's chart visualization. An authenticated user with perm

5.4MEDIUM

CVE-2025-48912

< 4.1.2

An authenticated malicious actor using specially crafted requests could bypass row level security configuration by injecting SQL i

6.5MEDIUM

CVE-2025-27696

< 4.1.2

Incorrect Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authentica

8.8HIGH

CVE-2024-55633

< 4.1.0

Improper Authorization vulnerability in Apache Superset. On Postgres analytic databases an attacker with SQLLab access can craft

6.5MEDIUM

CVE-2024-53949

>= 2.0.0 and < 4.1.0

Improper Authorization vulnerability in Apache Superset when FAB_ADD_SECURITY_API is enabled (disabled by default). Allows for lo

6.5MEDIUM

CVE-2024-53948

< 4.1.0

Generation of Error Message Containing analytics metadata Information in Apache Superset. This issue affects Apache Superset: bef

5.3MEDIUM

CVE-2024-53947

< 4.1.0

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Superset. Specificall

9.8CRITICAL

CVE-2024-39887

< 4.0.2

An SQL Injection vulnerability in Apache Superset exists due to improper neutralization of special elements used in SQL commands.

4.3MEDIUM

CVE-2024-34693

< 3.1.3

Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection wi

6.8MEDIUM

CVE-2024-28148

< 4.0.0

An authenticated user could potentially access metadata for a datasource they are not authorized to view by submitting a targeted

4.3MEDIUM

CVE-2024-26016

< 3.0.4

A low privilege authenticated user could import an existing dashboard or chart that they do not have access to and then modify its

4.3MEDIUM

CVE-2024-24779

<= 3.0.4

Apache Superset with custom roles that include can write on dataset and without all data access permissions, allows for users to

5.0MEDIUM

CVE-2024-24773

< 3.0.4

Improper parsing of nested SQL statements on SQLLab would allow authenticated users to surpass their data authorization scope. Thi

4.9MEDIUM

CVE-2024-24772

< 3.0.4

A guest user could exploit a chart data REST API and send arbitrary SQL statements that on error could leak information from the u

4.3MEDIUM

CVE-2024-27315

< 3.0.4

An authenticated user with privileges to create Alerts on Alerts & Reports has the capability to generate a specially crafted SQL

4.3MEDIUM

CVE-2024-23952

< 2.1.3

This is a duplicate for CVE-2023-46104. With correct CVE version ranges for affected Apache Superset. Uncontrolled resource cons

6.5MEDIUM

CVE-2023-49657

< 3.0.3

A stored cross-site scripting (XSS) vulnerability exists in Apache Superset before 3.0.3. An authenticated attacker with create/u

9.6CRITICAL

CVE-2023-49736

< 2.1.2

A where_in JINJA macro allows users to specify a quote, which combined with a carefully crafted statement would allow for SQL inj

6.5MEDIUM

CVE-2023-49734

< 2.1.2

An authenticated Gamma user has the ability to create a dashboard and add charts to it, this user would automatically become one o

7.7HIGH

CVE-2023-46104

< 2.1.3

Uncontrolled resource consumption can be triggered by authenticated attacker that uploads a malicious ZIP to import database, dash

6.5MEDIUM

CVE-2023-42504

< 3.0.0

An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports, leading t

5.8MEDIUM

CVE-2023-42505

< 3.0.0

An authenticated user with read permissions on database connections metadata could potentially access sensitive information such a

4.3MEDIUM

CVE-2023-42502

< 3.0.0

An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Ho

4.8MEDIUM

CVE-2023-43701

< 2.1.2

Improper payload validation and an improper REST API response type, made it possible for an authenticated malicious actor to store

4.3MEDIUM

CVE-2023-42501

< 2.1.1

Unnecessary read permissions within the Gamma role would allow authenticated users to read configured CSS templates and annotation

4.3MEDIUM

CVE-2023-40610

< 2.1.2

Improper authorization check and possible privilege escalation on Apache Superset up to but excluding 2.1.2. Using the default ex

6.3MEDIUM

CVE-2023-39265

<= 2.1.0

Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver

3.8LOW

CVE-2023-37941

>= 1.5.0 and <= 2.1.0

If an attacker gains write access to the Apache Superset metadata database, they could persist a specifically crafted Python objec

6.6MEDIUM

CVE-2023-32672

<= 2.1.0

An Incorrect authorisation check in SQLLab in Apache Superset versions up to and including 2.1.0. This vulnerability allows an aut

4.3MEDIUM

CVE-2023-39264

<= 2.1.0

By default, stack traces for errors were enabled, which resulted in the exposure of internal traces on REST API endpoints to users

4.3MEDIUM

CVE-2023-36388

<= 2.1.0

Improper REST API permission in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma users to test network

4.3MEDIUM

CVE-2023-36387

<= 2.1.0

An improper default REST API permission for Gamma users in Apache Superset up to and including 2.1.0 allows for an authenticated G

5.4MEDIUM

CVE-2023-27526

<= 2.1.0

A non Admin authenticated user could incorrectly create resources using the import charts feature, on Apache Superset up to and in

4.3MEDIUM

CVE-2023-27523

<= 2.1.0

Improper data authorization check on Jinja templated queries in Apache Superset up to and including 2.1.0 allows for an authentic

5.0MEDIUM

CVE-2023-30776

>= 1.3.0 and <= 2.0.1

An authenticated user with specific data permissions could access database connections stored passwords by requesting a specific R

4.9MEDIUM

CVE-2023-27524

<= 2.0.1

Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default

8.9HIGH

CVE-2023-27525

<= 2.0.1

An authenticated user with Gamma role authorization could have access to metadata information using non trivial methods in Apache

3.1LOW

CVE-2023-25504

<= 2.0.1

A malicious actor who has been authenticated and granted specific permissions in Apache Superset may use the import dataset featur

4.9MEDIUM

CVE-2022-45438

<= 1.5.2

When explicitly enabling the feature flag DASHBOARD_CACHE (disabled by default), the system allowed for an unauthenticated user to

5.3MEDIUM

CVE-2022-43721

<= 1.5.2

An authenticated attacker with update datasets permission could change a dataset link to an untrusted site, users could be redirec

5.4MEDIUM

CVE-2022-43720

<= 1.5.2

An authenticated attacker with write CSS template permissions can create a record with specific HTML tags that will not get proper

5.4MEDIUM

CVE-2022-43719

<= 1.5.2

Two legacy REST API endpoints for approval and request access are vulnerable to cross site request forgery. This issue affects Apa

8.8HIGH

CVE-2022-43718

<= 1.5.2

Upload data forms do not correctly render user input leading to possible XSS attack vectors that can be performed by authenticated

5.4MEDIUM

CVE-2022-43717

<= 1.5.2

Dashboard rendering does not sufficiently sanitize the content of markdown components leading to possible XSS attack vectors that

5.4MEDIUM

CVE-2022-41703

<= 1.5.2

A vulnerability in the SQL Alchemy connector of Apache Superset allows an authenticated user with read access to a specific databa

5.4MEDIUM

CVE-2021-37839

<= 1.5.1

Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permis

4.3MEDIUM

CVE-2022-27479

< 1.4.2

Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which a

9.8CRITICAL

CVE-2021-44451

<= 1.3.2

Apache Superset up to and including 1.3.2 allowed for registered database connections password leak for authenticated users. This

6.5MEDIUM

CVE-2021-42250

< 1.3.2

Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log e

6.5MEDIUM

CVE-2021-41972

<= 1.3.1

Apache Superset up to and including 1.3.1 allowed for database connections password leak for authenticated users. This information

6.5MEDIUM

CVE-2021-41971

<= 1.3.0

Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING on (disabled by default) allowed SQL inj

8.8HIGH

CVE-2021-32609

<= 1.1

Apache Superset up to and including 1.1 does not sanitize titles correctly on the Explore page. This allows an attacker with Explo

5.4MEDIUM

CVE-2021-28125

<= 1.0.1

Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking use

6.1MEDIUM

CVE-2021-27907

<= 0.38.0

Apache Superset up to and including 0.38.0 allowed the creation of a Markdown component on a Dashboard page for describing chart's

5.4MEDIUM

CVE-2020-13952

< 0.37.2

In the course of work on the open source project it was discovered that authenticated users running queries against Hive and Prest

8.1HIGH

CVE-2020-13948

< 0.37.1

While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests via a numbe

8.8HIGH

CVE-2020-1932

all versions

An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and 0.35.1. Authenticated Apache Superset use

6.5MEDIUM

CVE-2019-12414

< 0.32

In Apache Incubator Superset before 0.32, a user can view database names that he has no access to on a dropdown list in SQLLab

5.3MEDIUM

CVE-2019-12413

< 0.31

In Apache Incubator Superset before 0.31 user could query database metadata information from a database he has no access to, by us

5.3MEDIUM

CVE-2018-8021

< 0.23

Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remo

9.8CRITICAL