superset

Direct Vulnerabilities

Known vulnerabilities in the superset package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Directory Traversal	<4.0.2-r6
L GHSA-79v4-65xg-pq4g	<4.1.1-r3
L GHSA-f9vj-2wh5-fj8j	<4.0.2-r6
L GHSA-fw5r-6m3x-rh7p	<4.0.2-r5
L HTTP Request Smuggling	<4.1.1-r8
M Heap-based Buffer Overflow	<5.0.0-r0
M CVE-2024-45314	<4.0.2-r5
M Information Exposure	<4.1.1-r7
L CVE-2024-12797	<4.1.1-r3
L GHSA-5rjg-fvgr-3xxf	<4.1.2-r3
M Open Redirect	<4.1.2-r6
L GHSA-pq67-6m6q-mj2v	<4.1.2-r6
L GHSA-99pm-ch96-ccp2	<4.1.2-r2
M Open Redirect	<4.1.2-r6
L Insufficiently Protected Credentials	<4.1.2-r4
H Resource Exhaustion	<4.0.2-r6
L GHSA-h4gh-qq45-vh27	<4.1.1-r3
L GHSA-q34m-jh98-gwm2	<4.0.2-r6
L GHSA-p8q5-cvwx-wvwp	<4.1.1-r7
M Open Redirect	<4.1.2-r2
L GHSA-gmj6-6f8f-6699	<4.1.1-r1
L Protection Mechanism Failure	<4.1.1-r1
L GHSA-9hjg-9r4m-mvj7	<4.1.2-r4
H Directory Traversal	<4.1.2-r3
L GHSA-hc5x-x2vx-497g	<4.1.1-r8
H Improper Neutralization	<4.1.1-r1
L GHSA-48p4-8xcf-vxj5	<4.1.2-r6
L GHSA-xg8h-j46f-w952	<5.0.0-r0
L GHSA-q2x7-8rv6-6q7h	<4.1.1-r1
L Arbitrary Code Injection	<4.0.2-r3
L Loop with Unreachable Exit Condition ('Infinite Loop')	<4.0.2-r2
H Insufficient Verification of Data Authenticity	<4.0.2-r1
M CVE-2024-37891	<4.0.1-r2
L CVE-2024-35195	<4.0.1-r1
L CVE-2024-34069	<4.0.1-r0
L Cross-site Scripting (XSS)	<4.0.1-r0