https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T11:28:17.048866+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-43717 CVE-2022-43717 — Apache Superset: Cross-Site Scripting on dashboards 2026-10-04T11:28:17.080545+00:00

Affected: Apache Software Foundation Apache Superset

Dashboard rendering does not sufficiently sanitize the content of markdown components leading to possible XSS attack vectors that can be performed by authenticated users with create dashboard permissions. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.

 https://vulnerability.circl.lu/vuln/ghsa-9f88-wg5r-947j GHSA-9f88-wg5r-947j — Apache Superset vulnerable to Cross-site Scripting 2026-10-04T11:28:17.081019+00:00

Affected: PyPI: apache-superset

Dashboard rendering does not sufficiently sanitize the content of markdown components leading to possible XSS attack vectors that can be performed by authenticated users with create dashboard permissions. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0.