Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-8021
7.5
HIGHCVSS v2
Published
November 7, 2018
Affected
2 projects
Assigned by
Apache
Severity scale
010
Description
Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code execution. Note Superset 0.23 was released prior to any Superset release under the Apache Software Foundation.
apache/superset
GitHubApache Superset is a Data Visualization and Data Exploration Platform
GitHubApache Superset is a Data Visualization and Data Exploration Platform< 0.23, < 0.23.0NVD
supersetPython Package IndexSuperset has moved to apache-superset, as of 0.34.0 onwards, please pip install apache-superset
Python Package IndexSuperset has moved to apache-superset, as of 0.34.0 onwards, please pip install apache-superset< 0.23, < 0.23.0OSV