https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T13:10:20.538571+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-24779 CVE-2024-24779 — Apache Superset: Improper data authorization when creating a new dataset 2026-09-28T13:10:21.736140+00:00

Affected: Apache Software Foundation Apache Superset

Apache Superset with custom roles that include `can write on dataset` and without all data access permissions, allows for users to create virtual datasets to data they don't have access to. These users could then use those virtual datasets to get access to unauthorized data. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.

Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.

 https://vulnerability.circl.lu/vuln/ghsa-wr6g-9wcr-cmqj GHSA-wr6g-9wcr-cmqj — Apache Superset: Improper data authorization when creating a new dataset 2026-09-28T13:10:21.736248+00:00

Affected: PyPI: apache-superset

Apache Superset with custom roles that include `can write on dataset` and without all data access permissions, allows for users to create virtual datasets to data they don't have access to. These users could then use those virtual datasets to get access to unauthorized data. This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.

Users are recommended to upgrade to version 3.1.1 or 3.0.4, which fixes the issue.