CVE-2021-32609: Apache Superset

Medium severity, CVSS 5.4. EPSS: 1.7% chance of exploitation in the next 30 days.

Apache Superset up to and including 1.1 does not sanitize titles correctly on the Explore page. This allows an attacker with Explore access to save a chart with a malicious title, injecting html (including scripts) into the page.

Affected products

• Apache Superset: up to and including 1.1

Published 2021-10-18. Last modified 2026-06-17.