CLEANSTART-2026-JF82982: Security fix for GHSA-2g87-pp6c-29x5 applied in: apache-superset 2021.36.5-r0, apache-superset 2021.38.2-r0

Q: Which package builds include the security fix?

The fix is applied in apache-superset 2021.36.5-r0 and apache-superset 2021.38.2-r0. The issue is resolved in later releases.

Q: Can this issue be exploited remotely without authentication or user interaction?

The provided vector indicates network attack access, low attack complexity, no required privileges, and no user interaction. It also indicates high impact to availability, with no stated impact to confidentiality or integrity.

Published Nov 5, 2026

Updated

Security vulnerability affects the apache-superset package. This issue is resolved in later releases. See references for vulnerability details.

Affected Software

2 affected componentsFixes available

cleanstart/apache-superset<2021.36.5-r0

2021.36.5-r0

cleanstart/apache-superset<2021.38.2-r0

2021.38.2-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/apache-superset to a version that resolves this vulnerability.
Fixed in 2021.36.5-r0
Upgrade
Upgrade cleanstart/apache-superset to a version that resolves this vulnerability.
Fixed in 2021.38.2-r0
Upgrade
Upgrade apache-superset to a version that resolves this vulnerability.
Fixed in 2021.36.5-r0
Upgrade
Upgrade apache-superset to a version that resolves this vulnerability.
Fixed in 2021.38.2-r0

Event History

Nov 5, 2026

Advisory Published

via OSV·12:36 AM

Data Sourced

via OSV·12:36 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

GHSA-2g87-pp6c-29x5

Frequently Asked Questions

Which package builds include the security fix?

The fix is applied in apache-superset 2021.36.5-r0 and apache-superset 2021.38.2-r0. The issue is resolved in later releases.

Can this issue be exploited remotely without authentication or user interaction?

The provided vector indicates network attack access, low attack complexity, no required privileges, and no user interaction. It also indicates high impact to availability, with no stated impact to confidentiality or integrity.

CLEANSTART-2026-JF82982: Security fix for GHSA-2g87-pp6c-29x5 applied in: apache-superset 2021.36.5-r0, apache-superset 2021.38.2-r0

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which package builds include the security fix?

Can this issue be exploited remotely without authentication or user interaction?

Company

Resources

Contact

Frequently Asked Questions

Which package builds include the security fix?

Can this issue be exploited remotely without authentication or user interaction?