CVE-2021-44451: Apache Superset

Medium severity, CVSS 6.5. EPSS: 7.9% chance of exploitation in the next 30 days.

Apache Superset up to and including 1.3.2 allowed for registered database connections password leak for authenticated users. This information could be accessed in a non-trivial way. Users should upgrade to Apache Superset 1.4.0 or higher.

Affected products

• Apache Superset: up to and including 1.3.2

Published 2022-02-01. Last modified 2026-06-17.