Changes.Watch~ upgrade verdicts ~
Free digest
ExploitedPHP2Shell is now on CISA KEV

critical vulnerability

Cross-site Scripting in Apache superset

Fix availableCritical · CVSS 9.6EPSS 0.84%

Published Jan 23, 2024 · updated Oct 27, 2026

What to do

  1. Upgrade to a fixed version: apache-superset 3.0.3.
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

PyPIapache-superset77,926 downloads/week

Vulnerable versions
< 3.0.3
Fixed in
3.0.3

Check your project: pip show apache-superset

Sources

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

← All critical vulnerabilities