AS
Product
Apache Superset
On CISA KEVExploited in the wild
45
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 39Low 0
Watch
Add Apache Superset to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-27696 | 8.8 | May 13 | Apache Superset: Incorrect authorization leading to resource ownership takeover Affected: through 4.1.1 |
| CVE-2023-49736 | 8.8 | Dec 19 | Apache Superset: SQL Injection on where_in JINJA macro Affected: before 2.1.2; 3.0.0 before 3.0.2 |
| CVE-2023-40610 | 8.8 | Nov 27 | Apache Superset: Privilege escalation with default examples database Affected: before 2.1.2 |
Showing 3