CLEANSTART-2026-UB88543: Werkzeug is a comprehensive WSGI web application library

Q: What must an attacker be able to do to exploit this issue?

The CVSS vector indicates the attacker must have adjacent-network access and requires user interaction. No privileges are required before exploitation.

Q: What is the expected security impact if exploitation succeeds?

The reported impact is limited to low integrity impact. No confidentiality or availability impact is indicated, and the vulnerability does not change the security scope.

Published Nov 3, 2026

Updated

Security vulnerability affects the apache-superset package. Werkzeug is a comprehensive WSGI web application library.

Affected Software

1 affected componentFixes available

cleanstart/apache-superset<2021.38.2-r0

2021.38.2-r0

Event History

Nov 3, 2026

Advisory Published

via OSV·12:39 AM

Data Sourced

via OSV·12:39 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2023-23934

Frequently Asked Questions

What must an attacker be able to do to exploit this issue?

The CVSS vector indicates the attacker must have adjacent-network access and requires user interaction. No privileges are required before exploitation.

What is the expected security impact if exploitation succeeds?

The reported impact is limited to low integrity impact. No confidentiality or availability impact is indicated, and the vulnerability does not change the security scope.

CLEANSTART-2026-UB88543: Werkzeug is a comprehensive WSGI web application library

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What must an attacker be able to do to exploit this issue?

What is the expected security impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker be able to do to exploit this issue?

What is the expected security impact if exploitation succeeds?