/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-pp42-hvq5-fv7m

Published

Last updated

https://images.chainguard.dev/security/CGA-pp42-hvq5-fv7m
Package

superset-4.1

RepositoryWolfi
Latest Update
Pending upstream fix
Aliases
  • CVE-2025-50181
  • GHSA-pq67-6m6q-mj2v

Severity

6.1

Medium

CVSS V3

References

  • https://nvd.nist.gov/vuln/detail/CVE-2025-50181

Updates

Status

Pending upstream fix

Impact

upstream superset needs to upgrade urllib3 to 2.5.0 or latest. Current version is 1.26.19 which is a large version jump which contains many changes. This will require changes to superset code base.

Status

Under investigation


Safe Source for Open Sourceâ„¢
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing