You are viewing a plain text version of this content. The canonical link for it is here.

---

- Consulting request - posted by Julien Béti <ju...@cosium.com> on 2026/02/13 16:48:03 UTC, 0 replies.
- CVE-2026-23969: Apache Superset: Exposure of Sensitive Information via Incomplete ClickHouse Function Filtering - posted by Daniel Gaspar <dp...@apache.org> on 2026/02/24 09:23:01 UTC, 0 replies.
- CVE-2026-23980: Apache Superset: Improper Neutralization of Special Elements used in a SQL Command - posted by Daniel Gaspar <dp...@apache.org> on 2026/02/24 09:26:05 UTC, 0 replies.
- CVE-2026-23982: Apache Superset: Improper Authorization in Dataset Creation Allows Access Control Bypass - posted by Daniel Gaspar <dp...@apache.org> on 2026/02/24 09:35:43 UTC, 0 replies.
- CVE-2026-23983: Apache Superset: Sensitive Data Exposure via REST API (disabled by default) - posted by Daniel Gaspar <dp...@apache.org> on 2026/02/24 09:42:35 UTC, 0 replies.
- CVE-2026-23984: Apache Superset: SQLLab Read-Only Bypass on PostgreSQL - posted by Daniel Gaspar <dp...@apache.org> on 2026/02/24 09:45:40 UTC, 0 replies.