Vulnerability in Apache Software Foundation Superset
CVE-2026-23985
A Regular Expression Denial of Service (ReDoS) vulnerability exists in Apache Superset versions 1.5.0 through 5.0.0. The vulnerability is located in the sql_parse.py component, specifically within the SQL_REGEX used for parsing SQL stateme…
Vulnerability class: ReDoS (Regular Expression Denial of Service)
Affected products
- Apache Software Foundation Superset — versions 0
Weakness classification (CWE)
References
- security@apache.org (vendor-advisory)
- af854a3a-2127-422b-91ae-364da2661108