CLEANSTART-2026-TH54480: Flask-Caching extension through 1

Q: What access does an attacker need to exploit this issue?

The CVSS vector indicates the issue is network-accessible, has low attack complexity, requires no privileges, and does not require user interaction.

Q: What is the potential impact if exploitation succeeds?

The reported CVSS vector indicates high impact to confidentiality, integrity, and availability.

Q: How can I determine whether my deployment may be affected?

Review whether the affected apache-superset package includes the Flask-Caching extension at a version through 1, as identified in the advisory data.

Published Nov 3, 2026

Updated

Security vulnerability affects the apache-superset package. The Flask-Caching extension through 1.

Affected Software

4 affected componentsFixes available

cleanstart/apache-superset<2021.36.5-r0

2021.36.5-r0

cleanstart/apache-superset<2021.38.2-r0

2021.38.2-r0

cleanstart/apache-superset<2021.40.1-r0

2021.40.1-r0

cleanstart/apache-superset<2021.41.0-r0

2021.41.0-r0

Event History

Nov 3, 2026

Advisory Published

via OSV·12:39 AM

Data Sourced

via OSV·12:39 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2021-33026

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The CVSS vector indicates the issue is network-accessible, has low attack complexity, requires no privileges, and does not require user interaction.

What is the potential impact if exploitation succeeds?

The reported CVSS vector indicates high impact to confidentiality, integrity, and availability.

How can I determine whether my deployment may be affected?

Review whether the affected apache-superset package includes the Flask-Caching extension at a version through 1, as identified in the advisory data.

CLEANSTART-2026-TH54480: Flask-Caching extension through 1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

How can I determine whether my deployment may be affected?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

How can I determine whether my deployment may be affected?