You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@superset.apache.org by ru...@apache.org on 2025/05/14 17:37:03 UTC

(superset) branch master updated: docs: CVEs fixed on 4.1.2 (#33435)

This is an automated email from the ASF dual-hosted git repository.

rusackas pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/superset.git


The following commit(s) were added to refs/heads/master by this push:
     new 8a8fb49617 docs: CVEs fixed on 4.1.2 (#33435)
8a8fb49617 is described below

commit 8a8fb49617a5621399fb9164207b9bdd3f385542
Author: sha174n <10...@users.noreply.github.com>
AuthorDate: Wed May 14 18:36:58 2025 +0100

    docs: CVEs fixed on 4.1.2 (#33435)
---
 docs/docs/security/cves.mdx | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/docs/docs/security/cves.mdx b/docs/docs/security/cves.mdx
index 778cb72ab7..e61d860216 100644
--- a/docs/docs/security/cves.mdx
+++ b/docs/docs/security/cves.mdx
@@ -2,6 +2,12 @@
 title: CVEs fixed by release
 sidebar_position: 2
 ---
+#### Version 4.1.2
+
+| CVE            | Title                                                                              | Affected |
+|:---------------|:-----------------------------------------------------------------------------------|---------:|
+| CVE-2025-27696 | Improper authorization leading to resource ownership takeover                      |  < 4.1.2 |
+
 #### Version 4.1.0
 
 | CVE            | Title                                                                              | Affected |