{"action":"Upgrade apache-superset to 2.1.2 or later.","affected":[{"fixed":"2.1.2","introduced":"0"},{"fixed":"3.1.0rc1","introduced":"3.0.0"}],"component":"apache-superset","cve_ids":["CVE-2023-46104"],"ecosystem":"PyPI","epss":0.01667,"exploited":false,"fixed_versions":["2.1.2","3.1.0rc1"],"ghsa_id":"GHSA-95mg-jgfx-54v9","id":"tcs_01M5KF9W4FB0NGV0EZWMRPT480","modified_at":"2026-07-07T17:56:43.623948644Z","published_at":"2023-12-19T12:30:19Z","references":["https://osv.dev/vulnerability/GHSA-95mg-jgfx-54v9","https://nvd.nist.gov/vuln/detail/CVE-2023-46104","https://github.com/apache/superset/commit/7c23cb0b3fd224c320b35f05e74b572033569154","https://github.com/apache/superset/commit/f473d13d0d89de5990209ff81b17dfe2cee884d3","https://github.com/apache/superset","https://lists.apache.org/thread/yxbxg4wryb7cb7wyybk11l5nqy0rsrvl","http://www.openwall.com/lists/oss-security/2023/12/19/1","http://www.openwall.com/lists/oss-security/2024/02/14/2","http://www.openwall.com/lists/oss-security/2024/02/14/3"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-95mg-jgfx-54v9","url":"https://osv.dev/vulnerability/GHSA-95mg-jgfx-54v9"}],"summary":"Apache Superset uncontrolled resource consumption"}