engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

undf: assign UNDF-2026-000000815 through 000000817; stamp superset patches

Browse source
This commit is contained in:
russell@unturf.com 2026-03-30 13:04:50 -04:00
parent 5c94ac750a
commit 4f51d81913
4 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
UNDF-REGISTRY.json
View file

@ -811,5 +811,9 @@
"vscode-0004": "UNDF-2026-000000810",
"zed-0001": "UNDF-2026-000000811",
"zed-0002": "UNDF-2026-000000812",
"neovim-0001": "UNDF-2026-000000813"
"neovim-0001": "UNDF-2026-000000813",
"grafana-0003": "UNDF-2026-000000814",
"superset-0001": "UNDF-2026-000000815",
"superset-0002": "UNDF-2026-000000816",
"superset-0003": "UNDF-2026-000000817"
}

1
defects/superset/patch/superset-0001-security-manager-builtin-role-pvm-dedup.patch
View file

@ -1,3 +1,4 @@
# UNDF: UNDF-2026-000000815
# UNDF: (leave blank)
# superset-0001: SecurityManager._get_pvms_from_builtin_role pvm dedup O(Regex*PVMs*R)
# CWE-407: list membership check `pvm not in role_from_permissions` inside nested loop

1
defects/superset/patch/superset-0002-dashboard-filter-dedup.patch
View file

@ -1,3 +1,4 @@
# UNDF: UNDF-2026-000000816
# UNDF: (leave blank)
# superset-0002: DashboardDAO.update_native_filters_config filter dedup O(M*U)
# CWE-407: list comprehension `[f.get("id") for f in updated_configuration]` rebuilt every iteration

1
defects/superset/patch/superset-0003-dataset-import-metric-column-dedup.patch
View file

@ -1,3 +1,4 @@
# UNDF: UNDF-2026-000000817
# UNDF: (leave blank)
# superset-0003: import_datasource metric/column dedup O(N^2) list rebuild
# CWE-407: `not in [m.metric_name for m in datasource.metrics]` rebuilds list each iteration