Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.3
Apache Superset may allow unauthorized code execution via AIOHTTP
published today
Summary
The Apache Superset application includes the AIOHTTP component, which has a security weakness that could let an attacker run unwanted code or disrupt the service. This matters because it could compromise data or availability. Install the latest Superset update or apply the vendor’s recommended patch to fix the issue.
What to do
- Update cleanstart apache-superset to version 2021.36.5-r0.
- Update cleanstart apache-superset to version 2021.38.2-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | apache-superset |
< 2021.36.5-r0 < 2021.38.2-r0 Fix: upgrade to 2021.36.5-r0
|
Original advisory text
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python
Security vulnerability affects the apache-superset package. AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published5 Nov 2026
Updated5 Nov 2026
First seen5 Nov 2026
Sources
CLEANSTART-2026-HT73564 · OSV
Track software like this
Free during beta