CLEANSTART-2026-VN36417: NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4

Q: What level of access does an attacker need?

The supplied vector indicates the issue is remotely reachable over the network, requires no privileges, and does not require user interaction. It is rated as having high availability impact, with no stated confidentiality or integrity impact.

Q: Which software should be considered in scope?

The record identifies cleanstart/apache-superset as the affected software, while the vulnerability title and description refer to seleniumhq/selenium prior to version 4. The provided data does not establish the dependency relationship or identify affected apache-superset versions.

Published Nov 3, 2026

Updated

Security vulnerability affects the apache-superset package. NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.

Affected Software

1 affected componentFixes available

cleanstart/apache-superset<2021.40.1-r2

2021.40.1-r2

Event History

Nov 3, 2026

Advisory Published

via OSV·12:40 AM

Data Sourced

via OSV·12:40 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2023-5590

Frequently Asked Questions

What level of access does an attacker need?

The supplied vector indicates the issue is remotely reachable over the network, requires no privileges, and does not require user interaction. It is rated as having high availability impact, with no stated confidentiality or integrity impact.

Which software should be considered in scope?

The record identifies cleanstart/apache-superset as the affected software, while the vulnerability title and description refer to seleniumhq/selenium prior to version 4. The provided data does not establish the dependency relationship or identify affected apache-superset versions.

CLEANSTART-2026-VN36417: NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What level of access does an attacker need?

Which software should be considered in scope?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need?

Which software should be considered in scope?