CLEANSTART-2026-NK38254: Security fix for GHSA-2g87-pp6c-29x5 applied in: airflow-3 3.3.2-r2, airflow-3 3.3.2-r3, apache-superset 2021.40.1-r0, apache-superset 2021.41.0-r0, airflow-3 3.3.2-r1

The fix is applied in airflow-3 3.3.2-r1, 3.3.2-r2, and 3.3.2-r3, and in apache-superset 2021.40.1-r0 and 2021.41.0-r0.

Move to a later release that includes the fix. The advisory states that the underlying issue is resolved in later releases.

Published Nov 3, 2026

Updated

GHSA-2g87-pp6c-29x5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

Affected Software

3 affected componentsFixes available

cleanstart/airflow-3<3.3.2-r2

3.3.2-r2

cleanstart/apache-superset<2021.40.1-r0

2021.40.1-r0

cleanstart/apache-superset<2021.41.0-r0

2021.41.0-r0

Nov 3, 2026

Advisory Published

via OSV·12:42 AM

Data Sourced

via OSV·12:42 AM

DescriptionSeverityAffected Software

Contains the following vulnerabilities.

The fix is applied in airflow-3 3.3.2-r1, 3.3.2-r2, and 3.3.2-r3, and in apache-superset 2021.40.1-r0 and 2021.41.0-r0.

Move to a later release that includes the fix. The advisory states that the underlying issue is resolved in later releases.