CLEANSTART-2026-WA93302: decode-uri-component provides a more robust alternative to decodeURIComponent
Published Nov 5, 2026
·Updated
Security vulnerability affects the apache-superset package. decode-uri-component provides a more robust alternative to decodeURIComponent.
Affected Software
1 affected componentFixes available
cleanstart/apache-superset<6.1.0-r8
6.1.0-r8
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/apache-supersetto a version that resolves this vulnerability.Fixed in 6.1.0-r8
Event History
Nov 5, 2026
Advisory Published
via OSV·12:36 AM
Data Sourced
via OSV·12:36 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The vector indicates network access is required, with no privileges or user interaction required. It also indicates that an additional attack requirement is present, but the supplied data does not describe that requirement.
2
What is the indicated security impact?
The supplied vector indicates high availability impact, while confidentiality and integrity impact are marked as none.
3
Are affected versions or fixed versions identified?
No affected-version range or fixed version is provided in the available data.