CVE-2023-27525

PyPI/apache-superset CVE-2023-27525: medium 4.3, EPSS 0.78%

Apache Superset vulnerable to Improper Authorization

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-7jhg-8m74-6f6g
• https://nvd.nist.gov/vuln/detail/CVE-2023-27525
• https://github.com/apache/superset
• https://lists.apache.org/thread/wpv7b17zjg2pmvpfkdd6nn8sco8y2q77

CVE-2023-27525 · published 2023-04-17T18:30:28Z · modified 2026-07-07T17:56:19.332335023Z · JSON

PyPI/apache-superset CVE-2023-27525: medium 4.3, EPSS 0.78%

Apache Superset vulnerable to Improper Authorization

Action: Upgrade apache-superset to 2.1.0 or later.

pip install apache-superset==2.1.0

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1163
• https://nvd.nist.gov/vuln/detail/CVE-2023-27525
• https://github.com/apache/superset
• https://lists.apache.org/thread/wpv7b17zjg2pmvpfkdd6nn8sco8y2q77
• https://pypi.org/project/apache-superset
• https://github.com/advisories/GHSA-7jhg-8m74-6f6g

CVE-2023-27525 · published 2026-07-07T11:45:18.497428Z · modified 2026-07-07T17:56:19.332335023Z · JSON