CLEANSTART-2026-MO70948: Security fix for GHSA-gj48-438w-jh9v applied in: apache-superset 2021.40.1-r0, apache-superset 2021.41.0-r0

Q: Which package builds include the security fix?

The fix is applied in cleanstart/apache-superset builds 2021.40.1-r0 and 2021.41.0-r0. The issue is resolved in later releases.

Q: What does the severity vector indicate about exploitation prerequisites?

The vector indicates network-based exploitation with low attack complexity, no required privileges, and required user interaction. It also indicates low confidentiality and integrity impact, no availability impact, and a scope change.

Published Nov 3, 2026

Updated

Security vulnerability affects the apache-superset package. This issue is resolved in later releases. See references for vulnerability details.

Affected Software

2 affected componentsFixes available

cleanstart/apache-superset<2021.40.1-r0

2021.40.1-r0

cleanstart/apache-superset<2021.41.0-r0

2021.41.0-r0

Event History

Nov 3, 2026

Advisory Published

via OSV·12:40 AM

Data Sourced

via OSV·12:40 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

GHSA-gj48-438w-jh9v

Frequently Asked Questions

Which package builds include the security fix?

The fix is applied in cleanstart/apache-superset builds 2021.40.1-r0 and 2021.41.0-r0. The issue is resolved in later releases.

What does the severity vector indicate about exploitation prerequisites?

The vector indicates network-based exploitation with low attack complexity, no required privileges, and required user interaction. It also indicates low confidentiality and integrity impact, no availability impact, and a scope change.

CLEANSTART-2026-MO70948: Security fix for GHSA-gj48-438w-jh9v applied in: apache-superset 2021.40.1-r0, apache-superset 2021.41.0-r0

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Which package builds include the security fix?

What does the severity vector indicate about exploitation prerequisites?

Company

Resources

Contact

Frequently Asked Questions

Which package builds include the security fix?

What does the severity vector indicate about exploitation prerequisites?