CLEANSTART-2026-FE07697: This affects the package celery before 5

Q: What level of access does an attacker need to exploit this issue?

The vulnerability requires low privileges. It can be exploited remotely without user interaction, but the attack complexity is rated high.

Q: What is the potential impact if exploitation succeeds?

Successful exploitation may result in high impact to confidentiality, integrity, and availability.

Q: Which deployments should be investigated first?

Investigate cleanstart/apache-superset deployments that include a Celery version earlier than 5, especially where low-privileged remote users can access the affected service or its interfaces.

Published Nov 3, 2026

Updated

Security vulnerability affects the apache-superset package. This affects the package celery before 5.

Affected Software

1 affected componentFixes available

cleanstart/apache-superset<2021.40.1-r2

2021.40.1-r2

Event History

Nov 3, 2026

Advisory Published

via OSV·12:40 AM

Data Sourced

via OSV·12:40 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2021-23727

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The vulnerability requires low privileges. It can be exploited remotely without user interaction, but the attack complexity is rated high.

What is the potential impact if exploitation succeeds?

Successful exploitation may result in high impact to confidentiality, integrity, and availability.

Which deployments should be investigated first?

Investigate cleanstart/apache-superset deployments that include a Celery version earlier than 5, especially where low-privileged remote users can access the affected service or its interfaces.

CLEANSTART-2026-FE07697: This affects the package celery before 5

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Which deployments should be investigated first?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Which deployments should be investigated first?