CLEANSTART-2026-LW61548: Security fix for GHSA-pxh4-856f-4h89 applied in: apache-superset 2021.36.5-r0, apache-superset 2021.38.2-r0, apache-superset 2021.40.1-r2, airflow-3 3.3.2-r1

Q: Which package releases have the security fix applied?

The fix is applied in apache-superset 2021.36.5-r0, 2021.38.2-r0, and 2021.40.1-r2, and in airflow-3 3.3.2-r1.

Q: What does the available severity data indicate about exploitation?

The CVSS vector indicates network access, high attack complexity, no required privileges, and no user interaction. It indicates high confidentiality and integrity impact, with no availability impact.

Published Nov 3, 2026

Updated

GHSA-pxh4-856f-4h89 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

Affected Software

4 affected componentsFixes available

cleanstart/apache-superset<2021.36.5-r0

2021.36.5-r0

cleanstart/apache-superset<2021.38.2-r0

2021.38.2-r0

cleanstart/apache-superset<2021.40.1-r2

2021.40.1-r2

cleanstart/airflow-3<3.3.2-r1

3.3.2-r1

Event History

Nov 3, 2026

Advisory Published

via OSV·12:42 AM

Data Sourced

via OSV·12:42 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

GHSA-pxh4-856f-4h89

Frequently Asked Questions

Which package releases have the security fix applied?

The fix is applied in apache-superset 2021.36.5-r0, 2021.38.2-r0, and 2021.40.1-r2, and in airflow-3 3.3.2-r1.

What does the available severity data indicate about exploitation?

The CVSS vector indicates network access, high attack complexity, no required privileges, and no user interaction. It indicates high confidentiality and integrity impact, with no availability impact.

CLEANSTART-2026-LW61548: Security fix for GHSA-pxh4-856f-4h89 applied in: apache-superset 2021.36.5-r0, apache-superset 2021.38.2-r0, apache-superset 2021.40.1-r2, airflow-3 3.3.2-r1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Which package releases have the security fix applied?

What does the available severity data indicate about exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which package releases have the security fix applied?

What does the available severity data indicate about exploitation?