apache-superset vulnerabilities

A modern, enterprise-ready business intelligence web application

latest version

5.0.0

latest non vulnerable version

first published

5 years ago

latest version published

1 months ago

licenses detected

Apache-2.0
[0,)

View apache-superset package health on Snyk Advisor (opens in a new tab)

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the apache-superset package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H SQL Injection	[,4.1.2)
M Incorrect Default Permissions	[,4.1.2)
H Improper Authorization	[,4.1.0rc2)
M SQL Injection	[,4.1.0rc2)
H Improper Authorization	[2.0.0,4.1.0rc3)
L SQL Injection	[,4.0.2)
M Arbitrary File Read	[,3.1.3)[4.0.0,4.0.1)
M Incorrect Authorization	[,3.1.2)[4.0.0rc1,4.0.0rc2)
M Cross-site Scripting (XSS)	[,2.1.0)
M Improper Authorization	[,3.0.4)[3.1.0,3.1.1)
M Insertion of Sensitive Information into Log File	[,3.0.4)[3.1.0rc1,3.1.1)
M Improper Authorization	[,3.0.4)[3.1.0rc1,3.1.1)
M Incorrect Authorization	[,3.0.4)[3.1.0rc1,3.1.1)
M SQL Injection	[,3.0.4)[3.1.0rc1,3.1.1)
M Cross-site Scripting (XSS)	[,3.0.3)
M Uncontrolled Resource Consumption	[,2.1.3)[3.0.0,3.0.2)
M SQL Injection	[,2.1.3)[3.0.0,3.0.2)
H Incorrect Authorization	[,2.1.3)[3.0.0,3.0.2)
M Allocation of Resources Without Limits or Throttling	[,2.1.3)[3.0.0rc1,3.0.0)
M Incorrect Default Permissions	[,2.1.2)
M Open Redirect	[,3.0.0)
M Cross-site Scripting (XSS)	[,2.1.2)
M Incorrect Authorization	[,2.1.2)
M Information Exposure	[,3.0.0)
M Information Exposure	[,2.1.1)
M Improper Preservation of Permissions	[,2.1.1)
L Improper Input Validation	[,2.1.1)
M Deserialization of Untrusted Data	[1.5.0,2.1.1)
M Server-side Request Forgery (SSRF)	[,2.1.1)
M Incorrect Authorization	[,2.1.1)
M Incorrect Authorization	[,2.1.1)
M Access Restriction Bypass	[,2.1.1)
M Server-side Request Forgery (SSRF)	[,2.1.0)
M Information Exposure	[1.3.0,2.1.0)
H Insecure Default Initialization of Resource	[,2.1.0)
L Access Restriction Bypass	[,2.1.0)
L Open Redirect	[,1.5.3)[2.0.0,2.0.1)
M Cross-site Request Forgery (CSRF)	[,1.5.3)[2.0.0,2.0.1)
M Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')	[,1.5.3)[2.0.0,2.0.1)
M Improper Access Control	[,1.5.3)[2.0.0,2.0.1)
M SQL Injection	[,1.5.3)[2.0.0,2.0.1)
M Cross-site Scripting (XSS)	[,1.5.3)[2.0.0,2.0.1)
L Cross-site Scripting (XSS)	[,1.5.3)[2.0.0,2.0.1)
M Information Exposure	[,1.5.1)
C SQL Injection	[,1.4.2)
M Insufficiently Protected Credentials	[,1.4.0)
H Improper Output Neutralization for Logs	[,1.3.2)
M Improper Output Neutralization for Logs	[,1.3.2)
M Insufficiently Protected Credentials	[,1.3.2)
M Cross-site Scripting (XSS)	[,1.2.0)
M SQL Injection	[,1.3.1)
M Open Redirect	[,1.1.0)
H Cross-site Scripting (XSS)	[,0.38.1)
M Cross-site Scripting (XSS)	[,0.36.0)
M Insecure Defaults	[,0.35.1)
M Cross-site Scripting (XSS)	[,0.34.0)
M Cross-site Scripting (XSS)	[,0.34.0)
C Arbitrary Code Execution	[,0.34.0)
M Cross-site Scripting (XSS)	[,0.34.0)
M Information Exposure	[,0.37.2)
H Remote Code Execution (RCE)	[,0.37.1)
M Information Exposure	[,0.34.0)
M Information Exposure	[,0.34.0)
M Information Exposure	[0.34.0,0.35.2)

Package versions

1 - 71 of 71 Results

version	published	direct vulnerabilities
5.0.0	23 Jun, 2025	0 C 0 H 0 M 0 L
5.0.0rc4	18 Jun, 2025	0 C 0 H 0 M 0 L
5.0.0rc3	29 May, 2025	0 C 0 H 0 M 0 L
5.0.0rc2	1 Apr, 2025	0 C 0 H 0 M 0 L
5.0.0rc1	4 Feb, 2025	0 C 0 H 0 M 0 L
4.1.3.post1	17 Jul, 2025	0 C 0 H 0 M 0 L
4.1.3rc2	27 Jun, 2025	0 C 0 H 0 M 0 L
4.1.3rc1	6 May, 2025	0 C 0 H 0 M 0 L
4.1.2	24 Mar, 2025	0 C 0 H 0 M 0 L
4.1.2rc1	13 Mar, 2025	0 C 1 H 1 M 0 L
4.1.1	20 Nov, 2024	0 C 1 H 1 M 0 L
4.1.1rc1	16 Nov, 2024	0 C 1 H 1 M 0 L
4.1.0	13 Nov, 2024	0 C 1 H 1 M 0 L
4.1.0rc4	2 Nov, 2024	0 C 1 H 1 M 0 L
4.1.0rc3	16 Oct, 2024	0 C 1 H 1 M 0 L
4.1.0rc2	26 Aug, 2024	0 C 2 H 1 M 0 L
4.0.2	2 Jul, 2024	0 C 3 H 2 M 0 L
4.0.1	13 May, 2024	0 C 3 H 2 M 1 L
4.0.0	8 Apr, 2024	0 C 3 H 3 M 1 L
4.0.0rc2	2 Apr, 2024	0 C 3 H 2 M 1 L
4.0.0rc1	20 Feb, 2024	0 C 3 H 3 M 1 L
3.1.3	9 May, 2024	0 C 3 H 2 M 1 L
3.1.2	3 Apr, 2024	0 C 3 H 3 M 1 L
3.1.1	20 Feb, 2024	0 C 3 H 4 M 1 L
3.1.0	18 Jan, 2024	0 C 3 H 9 M 1 L
3.1.0rc4	9 Jan, 2024	0 C 3 H 8 M 1 L
3.1.0rc3	18 Dec, 2023	0 C 3 H 8 M 1 L
3.1.0rc2	11 Dec, 2023	0 C 3 H 8 M 1 L
3.1.0rc1	28 Nov, 2023	0 C 3 H 8 M 1 L
3.0.4	20 Feb, 2024	0 C 3 H 4 M 1 L
3.0.3	17 Jan, 2024	0 C 3 H 9 M 1 L
3.0.2	22 Nov, 2023	0 C 3 H 10 M 1 L
3.0.1	18 Oct, 2023	0 C 4 H 12 M 1 L
3.0.0	18 Sep, 2023	0 C 4 H 12 M 1 L
3.0.0rc4	13 Sep, 2023	0 C 3 H 13 M 1 L
3.0.0rc3	24 Aug, 2023	0 C 3 H 13 M 1 L
3.0.0rc2	27 Jul, 2023	0 C 3 H 13 M 1 L
3.0.0rc1	3 Jul, 2023	0 C 3 H 13 M 1 L
2.1.3	16 Dec, 2023	0 C 3 H 12 M 1 L
2.1.2	23 Nov, 2023	0 C 4 H 15 M 1 L
2.1.1	29 Aug, 2023	0 C 4 H 18 M 1 L
2.1.1rc3	18 Aug, 2023	0 C 4 H 25 M 2 L
2.1.1rc2	24 Jul, 2023	0 C 4 H 25 M 2 L
2.1.1rc1	16 Jun, 2023	0 C 4 H 25 M 2 L
2.1.0	5 Apr, 2023	0 C 4 H 25 M 2 L
2.0.1	20 Dec, 2022	0 C 5 H 28 M 3 L
2.0.0	14 Jul, 2022	0 C 5 H 33 M 5 L
1.5.3	13 Jan, 2023	0 C 4 H 28 M 3 L
1.5.2	27 Sep, 2022	0 C 4 H 33 M 5 L
1.5.1	8 Jun, 2022	0 C 4 H 33 M 5 L
1.5.0	28 Apr, 2022	0 C 4 H 34 M 5 L
1.4.2	29 Mar, 2022	0 C 4 H 33 M 5 L
1.4.1	9 Feb, 2022	1 C 4 H 33 M 5 L
1.4.0	19 Jan, 2022	1 C 4 H 33 M 5 L
1.3.2	20 Oct, 2021	1 C 4 H 34 M 5 L
1.3.1	28 Sep, 2021	1 C 5 H 36 M 5 L
1.3.0	21 Aug, 2021	1 C 5 H 37 M 5 L
1.2.0	2 Jul, 2021	1 C 5 H 36 M 5 L
1.1.0	13 Apr, 2021	1 C 5 H 37 M 5 L
1.0.1	6 Feb, 2021	1 C 5 H 38 M 5 L
1.0.0	21 Jan, 2021	1 C 5 H 38 M 5 L
0.38.1	1 Mar, 2021	1 C 5 H 38 M 5 L
0.38.0	24 Nov, 2020	1 C 6 H 38 M 5 L
0.37.2	27 Sep, 2020	1 C 6 H 38 M 5 L
0.37.1	15 Sep, 2020	1 C 6 H 39 M 5 L
0.37.0	14 Aug, 2020	1 C 7 H 39 M 5 L
0.36.0	17 Apr, 2020	1 C 7 H 39 M 5 L
0.35.2	15 Jan, 2020	1 C 7 H 40 M 5 L
0.35.1	26 Nov, 2019	1 C 7 H 41 M 5 L
0.34.1	12 Oct, 2019	1 C 7 H 42 M 5 L
0.34.0	18 Sep, 2019	1 C 7 H 42 M 5 L