CLEANSTART-2026-TL01871: This affects the package celery before 5

Q: What access does an attacker need to exploit this issue?

The vulnerability is network-accessible and requires low privileges. No user interaction is required, but exploitation has high attack complexity.

Q: What is the potential impact if exploitation succeeds?

Successful exploitation can result in high impact to confidentiality, integrity, and availability within the affected security scope.

Q: How can I determine whether my environment is affected?

Identify the Celery version used by the affected apache-superset deployment. Versions of Celery before 5 are affected according to the advisory.

Q: What remediation is indicated by the available information?

Move the affected deployment away from Celery versions before 5. The provided data does not specify a more precise fixed version or additional workaround.

Published Nov 5, 2026

Updated

Security vulnerability affects the apache-superset package. This affects the package celery before 5.

Affected Software

1 affected componentFixes available

cleanstart/apache-superset<2021.38.2-r0

2021.38.2-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/apache-superset to a version that resolves this vulnerability.
Fixed in 2021.38.2-r0

Event History

Nov 5, 2026

Advisory Published

via OSV·12:36 AM

Data Sourced

via OSV·12:36 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2021-23727

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The vulnerability is network-accessible and requires low privileges. No user interaction is required, but exploitation has high attack complexity.

What is the potential impact if exploitation succeeds?

Successful exploitation can result in high impact to confidentiality, integrity, and availability within the affected security scope.

How can I determine whether my environment is affected?

Identify the Celery version used by the affected apache-superset deployment. Versions of Celery before 5 are affected according to the advisory.

What remediation is indicated by the available information?

Move the affected deployment away from Celery versions before 5. The provided data does not specify a more precise fixed version or additional workaround.

CLEANSTART-2026-TL01871: This affects the package celery before 5

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

How can I determine whether my environment is affected?

What remediation is indicated by the available information?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

How can I determine whether my environment is affected?

What remediation is indicated by the available information?