You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@superset.apache.org by "nigzak (via GitHub)" <gi...@apache.org> on 2024/05/21 12:19:49 UTC

[I] superset 4.0.1 uses sqlparse 0.4.4 with two high CVE findings => update to 0.5.0 [superset]

nigzak opened a new issue, #28624:
URL: https://github.com/apache/superset/issues/28624

   ### Bug description
   
   superset uses a sqlparse version which has to high CVE findings
   GHSA-2m57-hf25-phgg
   CVE-2024-4340
   
   update to 0.5.0 (or newer) should be made
   
   ### How to reproduce the bug
   
   download 4.0.1 image from dockerhub
   scan image
   
   ### Screenshots/recordings
   
   _No response_
   
   ### Superset version
   
   4.0.1
   
   ### Python version
   
   3.9
   
   ### Node version
   
   16
   
   ### Browser
   
   Chrome
   
   ### Additional context
   
   _No response_
   
   ### Checklist
   
   - [X] I have searched Superset docs and Slack and didn't find a solution to my problem.
   - [X] I have searched the GitHub issue tracker and didn't find a similar bug report.
   - [X] I have checked Superset's logs for errors and if I found a relevant Python stacktrace, I included it here as text in the "additional context" section.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org

Re: [I] superset 4.0.1 uses sqlparse 0.4.4 with two high CVE findings => update to 0.5.0 [superset]

Posted by "dosubot[bot] (via GitHub)" <gi...@apache.org>.
dosubot[bot] commented on issue #28624:
URL: https://github.com/apache/superset/issues/28624#issuecomment-2122510177

   <!-- Greeting -->
   Hey @nigzak! Good to see you again. Thanks for bringing this up. I'm taking a look at your issue and will provide you with a full answer shortly.
   
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org

Re: [I] superset 4.0.1 uses sqlparse 0.4.4 with two high CVE findings => update to 0.5.0 [superset]

Posted by "dpgaspar (via GitHub)" <gi...@apache.org>.
dpgaspar closed issue #28624: superset 4.0.1 uses sqlparse 0.4.4 with two high CVE findings => update to 0.5.0
URL: https://github.com/apache/superset/issues/28624


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org

Re: [I] superset 4.0.1 uses sqlparse 0.4.4 with two high CVE findings => update to 0.5.0 [superset]

Posted by "dpgaspar (via GitHub)" <gi...@apache.org>.
dpgaspar commented on issue #28624:
URL: https://github.com/apache/superset/issues/28624#issuecomment-2126662629

   Thank you for posting this issue. sqlparse was bumped to 0.5.0 on https://github.com/apache/superset/pull/28144


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org