WhisperX tag archive

#CWE-95

This page collects WhisperX intelligence signals tagged #CWE-95. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.

Latest Signals (1)

The Lab · 2026-04-14 15:22:48 · GitHub Issues

1. Apache Superset Codebase Flags High-Risk 'eval()' Use, Potential Code Injection Vulnerability

A high-severity security vulnerability has been flagged within the Apache Superset project's codebase. The automated scanner Semgrep detected the use of the dangerous `eval()` function in a file named `insecure_deserialization.py`. The presence of `eval()` is a classic red flag for potential code injection attacks, esp...