diff --git a/UNDF-REGISTRY.json b/UNDF-REGISTRY.json index ea0215c81..de9e0e8f8 100644 --- a/UNDF-REGISTRY.json +++ b/UNDF-REGISTRY.json @@ -811,5 +811,9 @@ "vscode-0004": "UNDF-2026-000000810", "zed-0001": "UNDF-2026-000000811", "zed-0002": "UNDF-2026-000000812", - "neovim-0001": "UNDF-2026-000000813" + "neovim-0001": "UNDF-2026-000000813", + "grafana-0003": "UNDF-2026-000000814", + "superset-0001": "UNDF-2026-000000815", + "superset-0002": "UNDF-2026-000000816", + "superset-0003": "UNDF-2026-000000817" } diff --git a/defects/superset/patch/superset-0001-security-manager-builtin-role-pvm-dedup.patch b/defects/superset/patch/superset-0001-security-manager-builtin-role-pvm-dedup.patch index c33dd088a..5974e4e0d 100644 --- a/defects/superset/patch/superset-0001-security-manager-builtin-role-pvm-dedup.patch +++ b/defects/superset/patch/superset-0001-security-manager-builtin-role-pvm-dedup.patch @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000000815 # UNDF: (leave blank) # superset-0001: SecurityManager._get_pvms_from_builtin_role pvm dedup O(Regex*PVMs*R) # CWE-407: list membership check `pvm not in role_from_permissions` inside nested loop diff --git a/defects/superset/patch/superset-0002-dashboard-filter-dedup.patch b/defects/superset/patch/superset-0002-dashboard-filter-dedup.patch index 691af8e31..c335fb135 100644 --- a/defects/superset/patch/superset-0002-dashboard-filter-dedup.patch +++ b/defects/superset/patch/superset-0002-dashboard-filter-dedup.patch @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000000816 # UNDF: (leave blank) # superset-0002: DashboardDAO.update_native_filters_config filter dedup O(M*U) # CWE-407: list comprehension `[f.get("id") for f in updated_configuration]` rebuilt every iteration diff --git a/defects/superset/patch/superset-0003-dataset-import-metric-column-dedup.patch b/defects/superset/patch/superset-0003-dataset-import-metric-column-dedup.patch index 9f0e004e1..ac7c096b6 100644 --- a/defects/superset/patch/superset-0003-dataset-import-metric-column-dedup.patch +++ b/defects/superset/patch/superset-0003-dataset-import-metric-column-dedup.patch @@ -1,3 +1,4 @@ +# UNDF: UNDF-2026-000000817 # UNDF: (leave blank) # superset-0003: import_datasource metric/column dedup O(N^2) list rebuild # CWE-407: `not in [m.metric_name for m in datasource.metrics]` rebuilds list each iteration