CVE-2022-27479: Apache Superset

Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days.

Apache Superset before 1.4.2 is vulnerable to SQL injection in chart data requests. Users should update to 1.4.2 or higher which addresses this issue.

Affected products

• Apache Superset: before 1.4.2 (fixed in 1.4.2)

Published 2022-04-13. Last modified 2026-06-17.