CLEANSTART-2026-ME78945: High severity vulnerability

Published Nov 5, 2026

Security vulnerability affects the apache-superset package. aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/apache-superset to a version that resolves this vulnerability.
Fixed in 2021.36.5-r0
Upgrade
Upgrade cleanstart/apache-superset to a version that resolves this vulnerability.
Fixed in 2021.38.2-r0

Frequently Asked Questions

What does an attacker need to exploit this issue?

The CVSS vector indicates that exploitation is network-accessible, requires low attack complexity, and does not require privileges or user interaction.

What is the expected security impact if exploitation succeeds?

The CVSS vector indicates a high confidentiality impact, with no indicated integrity or availability impact.

CLEANSTART-2026-ME78945: High severity vulnerability

Remediation

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected security impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected security impact if exploitation succeeds?