CLEANSTART-2026-NH36624: Jinja is an extensible templating engine

Q: What level of access does an attacker need to exploit this issue?

The vulnerability is rated with local attack vector and low privileges required. No user interaction is required for exploitation.

Q: What could a successful exploit allow?

The available severity data indicates high impact to confidentiality, integrity, and availability.

Q: Which deployments should be prioritized for review?

Review systems using the cleanstart/apache-superset software package. The provided data does not identify affected versions, configurations, or fixed releases.

Published Nov 3, 2026

Updated

Security vulnerability affects the apache-superset package. Jinja is an extensible templating engine.

Affected Software

2 affected componentsFixes available

cleanstart/apache-superset<2021.38.2-r0

2021.38.2-r0

cleanstart/apache-superset<2021.40.1-r2

2021.40.1-r2

Event History

Nov 3, 2026

Advisory Published

via OSV·12:39 AM

Data Sourced

via OSV·12:39 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2024-56326

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The vulnerability is rated with local attack vector and low privileges required. No user interaction is required for exploitation.

What could a successful exploit allow?

The available severity data indicates high impact to confidentiality, integrity, and availability.

Which deployments should be prioritized for review?

Review systems using the cleanstart/apache-superset software package. The provided data does not identify affected versions, configurations, or fixed releases.

CLEANSTART-2026-NH36624: Jinja is an extensible templating engine

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What could a successful exploit allow?

Which deployments should be prioritized for review?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What could a successful exploit allow?

Which deployments should be prioritized for review?