michalc opened a new issue #15271:
URL: https://github.com/apache/superset/issues/15271


   **Is your feature request related to a problem? Please describe.**
   
   flask-caching has a published vulnerability 
https://nvd.nist.gov/vuln/detail/CVE-2021-33026#vulnCurrentDescriptionTitle 
where access to the cache store would lead to authorised code execution in 
Superset. Unfortunately, a fix does not appear available at this time.
   
   **Describe the solution you'd like**
   
   A way to _not_ use Flask caching in Superset.
   
   **Describe alternatives you've considered**
   
   Forking Superset...
   
   **Additional context**
   
   None


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to