apache-superset vulnerabilities

A modern, enterprise-ready business intelligence web application

latest version

3.0.0
latest non vulnerable version

3.0.0
first published

4 years ago
latest version published

11 days ago
licenses detected
- Apache-2.0
  [0,)
View apache-superset package health on Snyk Advisor Open this link in a new tab

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the apache-superset package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Information Exposure	[,2.1.1)
M Improper Preservation of Permissions	[,2.1.1)
L Improper Input Validation	[,2.1.1)
M Deserialization of Untrusted Data	[1.5.0,2.1.1)
M Server-side Request Forgery (SSRF)	[,2.1.1)
M Incorrect Authorization	[,2.1.1)
M Incorrect Authorization	[,2.1.1)
M Access Restriction Bypass	[,2.1.1)
M Server-side Request Forgery (SSRF)	[,2.1.0)
M Information Exposure	[1.3.0,2.1.0)
H Insecure Default Initialization of Resource	[,2.1.0)
L Access Restriction Bypass	[,2.1.0)
L Open Redirect	[,1.5.3) [2.0.0,2.0.1)
M Cross-site Request Forgery (CSRF)	[,1.5.3) [2.0.0,2.0.1)
M Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')	[,1.5.3) [2.0.0,2.0.1)
M Improper Access Control	[,1.5.3) [2.0.0,2.0.1)
M SQL Injection	[,1.5.3) [2.0.0,2.0.1)
M Cross-site Scripting (XSS)	[,1.5.3) [2.0.0,2.0.1)
L Cross-site Scripting (XSS)	[,1.5.3) [2.0.0,2.0.1)
M Information Exposure	[,1.5.1)
C SQL Injection	[,1.4.2)
M Insufficiently Protected Credentials	[,1.4.0)
H Improper Output Neutralization for Logs	[,1.3.2)
M Improper Output Neutralization for Logs	[,1.3.2)
M Insufficiently Protected Credentials	[,1.3.2)
M Cross-site Scripting (XSS)	[,1.2.0)
M SQL Injection	[,1.3.1)
M Open Redirect	[,1.1.0)
H Cross-site Scripting (XSS)	[,0.38.1)
M Cross-site Scripting (XSS)	[,0.36.0)
M Insecure Defaults	[,0.35.1)
M Cross-site Scripting (XSS)	[,0.34.0)
M Cross-site Scripting (XSS)	[,0.34.0)
C Arbitrary Code Execution	[,0.34.0)
M Cross-site Scripting (XSS)	[,0.34.0)
M Information Exposure	[,0.37.2)
H Remote Code Execution (RCE)	[,0.37.1)
M Information Exposure	[,0.34.0)
M Information Exposure	[,0.34.0)
M Information Exposure	[0.34.0,0.35.2)

Package versions

1 - 36 of 36 Results

version	published	direct vulnerabilities
3.0.0	18 Sep, 2023	0 C 0 H 0 M 0 L
3.0.0rc4	13 Sep, 2023	0 C 0 H 0 M 0 L
3.0.0rc3	24 Aug, 2023	0 C 0 H 0 M 0 L
3.0.0rc2	27 Jul, 2023	0 C 0 H 0 M 0 L
3.0.0rc1	3 Jul, 2023	0 C 0 H 0 M 0 L
2.1.1	29 Aug, 2023	0 C 0 H 0 M 0 L
2.1.1rc3	18 Aug, 2023	0 C 0 H 7 M 1 L
2.1.1rc2	24 Jul, 2023	0 C 0 H 7 M 1 L
2.1.1rc1	16 Jun, 2023	0 C 0 H 7 M 1 L
2.1.0	5 Apr, 2023	0 C 0 H 7 M 1 L
2.0.1	20 Dec, 2022	0 C 1 H 9 M 2 L
2.0.0	14 Jul, 2022	0 C 1 H 14 M 4 L
1.5.3	13 Jan, 2023	0 C 1 H 9 M 2 L
1.5.2	27 Sep, 2022	0 C 1 H 14 M 4 L
1.5.1	8 Jun, 2022	0 C 1 H 14 M 4 L
1.5.0	28 Apr, 2022	0 C 1 H 15 M 4 L
1.4.2	29 Mar, 2022	0 C 1 H 14 M 4 L
1.4.1	9 Feb, 2022	1 C 1 H 14 M 4 L
1.4.0	19 Jan, 2022	1 C 1 H 14 M 4 L
1.3.2	20 Oct, 2021	1 C 1 H 15 M 4 L
1.3.1	28 Sep, 2021	1 C 2 H 17 M 4 L
1.3.0	21 Aug, 2021	1 C 2 H 18 M 4 L
1.2.0	2 Jul, 2021	1 C 2 H 17 M 4 L
1.1.0	13 Apr, 2021	1 C 2 H 18 M 4 L
1.0.1	6 Feb, 2021	1 C 2 H 19 M 4 L
1.0.0	21 Jan, 2021	1 C 2 H 19 M 4 L
0.38.1	1 Mar, 2021	1 C 2 H 19 M 4 L
0.38.0	24 Nov, 2020	1 C 3 H 19 M 4 L
0.37.2	27 Sep, 2020	1 C 3 H 19 M 4 L
0.37.1	15 Sep, 2020	1 C 3 H 20 M 4 L
0.37.0	14 Aug, 2020	1 C 4 H 20 M 4 L
0.36.0	17 Apr, 2020	1 C 4 H 20 M 4 L
0.35.2	15 Jan, 2020	1 C 4 H 21 M 4 L
0.35.1	26 Nov, 2019	1 C 4 H 22 M 4 L
0.34.1	12 Oct, 2019	1 C 4 H 23 M 4 L
0.34.0	18 Sep, 2019	1 C 4 H 23 M 4 L