All products

datasette

PyPI · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Datasette 1.0 alpha series leaks names of databases and tables to unauthenticated usersCVE-2023-40570 · GHSA-7CH3-7PP7-7CPQVersion ranges need review. datasette PyPI Medium Fix reported
Open redirect endpoint in DatasetteCVE-2025-64481 · GHSA-W832-GG5G-X44MVersion ranges need review. datasette PyPI Low Fix reported
CSRF tokens leaked in URL by canned query formGHSA-Q6J3-C4WC-63VW datasette PyPI Medium Fix reported
Reflected cross-site scripting issue in DatasetteCVE-2021-32670 · GHSA-XW7C-JX9M-XH5G datasette PyPI Medium Fix reported