CLEANSTART-2026-KQ75263: Flask-AppBuilder is a development framework built on top of Flask

Q: What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that exploitation is possible over the network with low attack complexity, requires low privileges, and does not require user interaction.

Q: What could a successful exploit allow?

The reported impact is high for confidentiality, integrity, and availability, meaning a successful exploit could have severe effects on data secrecy, modification, and service operation.

Published Nov 3, 2026

Updated

Security vulnerability affects the apache-superset package. Flask-AppBuilder is a development framework built on top of Flask.

Affected Software

3 affected componentsFixes available

cleanstart/apache-superset<2021.38.2-r0

2021.38.2-r0

cleanstart/apache-superset<2021.40.1-r0

2021.40.1-r0

cleanstart/apache-superset<2021.41.0-r0

2021.41.0-r0

Event History

Nov 3, 2026

Advisory Published

via OSV·12:39 AM

Data Sourced

via OSV·12:39 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2021-41265

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that exploitation is possible over the network with low attack complexity, requires low privileges, and does not require user interaction.

What could a successful exploit allow?

The reported impact is high for confidentiality, integrity, and availability, meaning a successful exploit could have severe effects on data secrecy, modification, and service operation.

CLEANSTART-2026-KQ75263: Flask-AppBuilder is a development framework built on top of Flask

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What could a successful exploit allow?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What could a successful exploit allow?