datasette-sqlite-vec (>=0.1.1a2, <=0.1.3a3), sqlite-utils-sqlite-vec (>=0.1.1a2, <=0.1.3a3) +1 more potentially affected by CVE-2024-46488 via sqlite-vec (>=0.1.1a2, <=0.1.3a3)

sqlite-vec PYPI version =0.1.1a2, =0.1.1a2, =0.1.1a2, =0.1.3a3 - zf-memician 0.1.3 Source cves: CVE-2024-46488 Source advisory: OSV:PYSEC-2026-1938...

CVE-2025-64481

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

CVE-2025-64481

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

PYSEC-2025-73

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

PYSEC-2025-73

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

CVE-2025-64481

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

CVE-2025-64481 Open redirect endpoint in Datasette

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

EUVD-2025-38040

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

CVE-2025-64481 Open redirect endpoint in Datasette

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

CVE-2025-64481 Open redirect endpoint in Datasette

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

datasette-acl (0.4.0a5), datasette-alerts (0.0.1a5) +23 more potentially affected by CVE-2025-64481 via datasette (>=1.0.0a7, <=1.0.0a19)

datasette PYPI version =1.0.0a7, =0.0.1a1, =0.1.0a3, =0.1.0a5 and more Source cves: CVE-2025-64481 Source advisory: MEND:CVE-2025-64481...

CVE-2025-64481

CVE-2025-64481 affects Datasette, an open-source data exploration/publishing tool. The vulnerability is an open redirect in deployed instances of Datasette versions 0.65.1 and earlier, and 1.0a0 through 1.0a19, triggered by requests to a path containing double slashes (for example, //example.com/...

aws-session-recorder (>=0.2.0, <=0.2.2), chasten (>=0.1.0, <=1.0.0) +10 more potentially affected by CVE-2025-64481 via datasette (>=0.37.1, <=0.64.8)

datasette PYPI version =0.37.1, =0.2.0, =0.1.0, =0.1.1a0, =2.0.0, =0.2.0, =0.1.0, =0.1.8 Source cves: CVE-2025-64481 Source advisory: MEND:CVE-2025-64481...

CVE-2025-64481

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

CVE-2025-64481: URL Redirection to Untrusted Site

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

Datasette input validation vulnerability

Datasette is an open source multi-purpose tool for exploring and distributing data in Simon Willison's personal development applications. An input validation error vulnerability exists in Datasette versions 0.65.1 and earlier and versions 1.0a0 through 1.0a19, which stems from improper path...

Open redirect endpoint in Datasette

Impact Deployed instances of Datasette prior to 0.65.2 and 1.0a21 include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to https://example.com/foo/bar. Patches This problem has been patched in both Datasette 0.65.2 an...

Open Redirect

Overview datasette is an An open source multi-tool for exploring and publishing data Affected versions of this package are vulnerable to Open Redirect via the handling of URLs containing double slashes followed by a domain and a trailing slash. An attacker can redirect users to arbitrary external...

datasette-acl (0.4.0a5), datasette-alerts (0.0.1a5) +23 more potentially affected by CVE-2025-64481 via datasette (>=1.0.0a7, <=1.0.0a19)

datasette PYPI version =1.0.0a7, =0.0.1a1, =0.1.0a3, =0.1.0a5 and more Source cves: CVE-2025-64481 Source advisory: SNYK:PYTHON-DATASETTE-13849308...

aws-session-recorder (>=0.2.0, <=0.2.2), chasten (>=0.1.0, <=1.0.0) +10 more potentially affected by CVE-2025-64481 via datasette (>=0.37.1, <=0.64.8)

datasette PYPI version =0.37.1, =0.2.0, =0.1.0, =0.1.1a0, =2.0.0, =0.2.0, =0.1.0, =0.1.8 Source cves: CVE-2025-64481 Source advisory: GHSA-W832-GG5G-X44M...