CLEANSTART-2026-NW73785: Security fix for GHSA-xmj3-9gf7-h52w applied in: apache-superset 2021.40.1-r0, apache-superset 2021.41.0-r0, airflow-3 3.3.2-r1

Q: Which Cleanstart package builds include the security fix?

The fix is applied in apache-superset 2021.40.1-r0, apache-superset 2021.41.0-r0, and airflow-3 3.3.2-r1. The issue is resolved in later releases as well.

Q: What access and conditions are indicated for exploitation?

The supplied vector indicates local attack access, low privileges, user interaction, high attack complexity, and an additional required condition. It indicates no confidentiality impact, with low integrity and availability impact.

Published Nov 3, 2026

Updated

GHSA-xmj3-9gf7-h52w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

Affected Software

3 affected componentsFixes available

cleanstart/apache-superset<2021.40.1-r0

2021.40.1-r0

cleanstart/apache-superset<2021.41.0-r0

2021.41.0-r0

cleanstart/airflow-3<3.3.2-r1

3.3.2-r1

Event History

Nov 3, 2026

Advisory Published

via OSV·12:42 AM

Data Sourced

via OSV·12:42 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

GHSA-xmj3-9gf7-h52w

Frequently Asked Questions

Which Cleanstart package builds include the security fix?

The fix is applied in apache-superset 2021.40.1-r0, apache-superset 2021.41.0-r0, and airflow-3 3.3.2-r1. The issue is resolved in later releases as well.

What access and conditions are indicated for exploitation?

The supplied vector indicates local attack access, low privileges, user interaction, high attack complexity, and an additional required condition. It indicates no confidentiality impact, with low integrity and availability impact.

CLEANSTART-2026-NW73785: Security fix for GHSA-xmj3-9gf7-h52w applied in: apache-superset 2021.40.1-r0, apache-superset 2021.41.0-r0, airflow-3 3.3.2-r1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Which Cleanstart package builds include the security fix?

What access and conditions are indicated for exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which Cleanstart package builds include the security fix?

What access and conditions are indicated for exploitation?