CVE-2025-64481

CVE-2025-64481 affects Datasette, an open-source data exploration/publishing tool. The vulnerability is an open redirect in deployed instances of Datasette versions 0.65.1 and earlier, and 1.0a0 through 1.0a19, triggered by requests to a path containing double slashes (for example, //example.com/...

aws-session-recorder (>=0.2.0, <=0.2.2), chasten (>=0.1.0, <=1.0.0) +10 more potentially affected by CVE-2025-64481 via datasette (>=0.37.1, <=0.64.8)

datasette PYPI version =0.37.1, =0.2.0, =0.1.0, =0.1.1a0, =2.0.0, =0.2.0, =0.1.0, =0.1.8 Source cves: CVE-2025-64481 Source advisory: MEND:CVE-2025-64481...

datasette-acl (0.4.0a5), datasette-alerts (0.0.1a5) +23 more potentially affected by CVE-2025-64481 via datasette (>=1.0.0a7, <=1.0.0a19)

datasette PYPI version =1.0.0a7, =0.0.1a1, =0.1.0a3, =0.1.0a5 and more Source cves: CVE-2025-64481 Source advisory: MEND:CVE-2025-64481...

aws-session-recorder (>=0.2.0, <=0.2.2), chasten (>=0.1.0, <=1.0.0) +10 more potentially affected by CVE-2025-64481 via datasette (>=0.37.1, <=0.64.8)

datasette PYPI version =0.37.1, =0.2.0, =0.1.0, =0.1.1a0, =2.0.0, =0.2.0, =0.1.0, =0.1.8 Source cves: CVE-2025-64481 Source advisory: OSV:GHSA-W832-GG5G-X44M...

aws-session-recorder (>=0.2.0, <=0.2.2), chasten (>=0.1.0, <=1.0.0) +10 more potentially affected by CVE-2025-64481 via datasette (>=0.37.1, <=0.64.8)

datasette PYPI version =0.37.1, =0.2.0, =0.1.0, =0.1.1a0, =2.0.0, =0.2.0, =0.1.0, =0.1.8 Source cves: CVE-2025-64481 Source advisory: SNYK:PYTHON-DATASETTE-13849308...