GHSA-5474-f7g5-273q
GitHub Security Advisory
Apache Superset: Improper validation of SQL statements allows for unauthorized access to data
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
Improper parsing of nested SQL statements on SQLLab would allow authenticated users to surpass their data authorization scope.
This issue affects Apache Superset: before 3.0.4, from 3.1.0 before 3.1.1.
Users are recommended to upgrade to version 3.1.1, which fixes the issue.
Affected Packages
PyPI
apache-superset
Affected versions:
0
(fixed in 3.0.4)
PyPI
apache-superset
Affected versions:
3.1.0
(fixed in 3.1.1)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: September 12, 2025 6:34 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.