forked from apache/superset
-
Notifications
You must be signed in to change notification settings - Fork 0
Pull requests: sha174n/superset
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
chore(docker): remove debugger flag from Flask dev server startup
api
dependencies:npm
doc
github_actions
packages
plugins
#19
opened May 20, 2026 by
sha174n
Owner
Loading…
fix: escape Jinja context parameters to prevent SQLi
#15
opened Apr 1, 2026 by
sha174n
Owner
Loading…
fix: prevent cross-user query cancellation via IDOR
#14
opened Apr 1, 2026 by
sha174n
Owner
Loading…
fix: add SQL length limit to prevent resource exhaustion
api
dependencies:npm
doc
embedded
github_actions
packages
plugins
#13
opened Apr 1, 2026 by
sha174n
Owner
Loading…
fix: add allowlist to TabStateView.put
api
dependencies:npm
doc
embedded
github_actions
packages
plugins
#12
opened Apr 1, 2026 by
sha174n
Owner
Loading…
fix(security): Extract tables from subqueries in raw expressions
api
dependencies:npm
doc
github_actions
packages
plugins
#11
opened Mar 5, 2026 by
sha174n
Owner
Loading…
fix(security): prevent RLS bypass via subqueries
api
#10
opened Mar 4, 2026 by
sha174n
Owner
Loading…
Fix IDOR in Dashboard API charts/datasets endpoints
api
#9
opened Feb 27, 2026 by
sha174n
Owner
Loading…
feat: Add SQL parsing validation to RLS clauses to prevent SQL injection
#8
opened Feb 23, 2026 by
sha174n
Owner
Loading…
fix(legacy-plugin-chart-partition): prevent stored XSS in tooltip
dependencies:npm
plugins
#6
opened Feb 11, 2026 by
sha174n
Owner
Loading…
fix(security): apply RLS to UPDATE/DELETE statements in SQL Lab
#5
opened Jan 6, 2026 by
google-labs-jules
Bot
•
Draft
fix(security): prevent SQL injection in Postgres schema prequery
#4
opened Jan 4, 2026 by
google-labs-jules
Bot
•
Draft
test: add regression test for RLS bypass via VALUES clause
#2
opened Jan 3, 2026 by
google-labs-jules
Bot
•
Draft
Verify fix for Guest Token IDOR vulnerability
#1
opened Jan 2, 2026 by
google-labs-jules
Bot
•
Draft
ProTip!
Type g p on any issue or pull request to go back to the pull request listing page.