VULNERABILITY INTELLIGENCE

CVE-2026-23985

CVSS score6.5 MEDIUM

EPSS probability0.45%

CISA KEVNot currently listed

Published2026-07-30

Last modified2026-10-23

Description

A Regular Expression Denial of Service (ReDoS) vulnerability exists in Apache Superset versions 1.5.0 through 5.0.0. The vulnerability is located in the sql_parse.py component, specifically within the SQL_REGEX used for parsing SQL statements in the sqlparse library integration. The affected regular…