Login Request a demo
AS
Product
Apache Superset
by Apache Software Foundation · last CVE Jul 30, 2026
On CISA KEVExploited in the wild
45
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities45In the news0Timeline
Severity mix
Critical 3High 3Medium 39Low 0
Severity
All severities45Critical3High3Medium39Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Apache Superset to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-27524
In wildKEV
9.8
98%
Apr 24
Apache Superset: Session validation vulnerability when using provided default SECRET_KEY
Affected: through 2.0.1
CVE-2024-53947
9.8
1%
Dec 9
Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions
Affected: before 4.1.0
CVE-2024-39887
9.8
4%
Jul 16
Apache Superset: Improper SQL authorisation, parse not checking for specific engine functions
Affected: before 4.0.2
Showing 3