[SECURITY] Fedora 44 Update: python-tablib-3.10.0-1.fc44

Tablib is a format-agnostic tabular dataset library, written in Python...

[SECURITY] Fedora 43 Update: python-tablib-3.10.0-1.fc43

Tablib is a format-agnostic tabular dataset library, written in Python...

Fedora 44 : python-tablib (2026-eaa6ecd43e)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-eaa6ecd43e advisory. Resolves: https://nvd.nist.gov/vuln/detail/CVE-2026-9318 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

Fedora 43 : python-tablib (2026-81ad01b22a)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-81ad01b22a advisory. Resolves: https://nvd.nist.gov/vuln/detail/CVE-2026-9318 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

tablib: Stored XSS in the HTML export via unescaped dataset title

tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding malicious payloads in dataset titles, which are interpolated unsanitized into HTML output via the exportbook method in th...

PYSEC-2026-3702 tablib: Stored XSS in the HTML export via unescaped dataset title

tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding malicious payloads in dataset titles, which are interpolated unsanitized into HTML output via the exportbook method in th...

bitwarden (>=0.2.2, <=0.4.0), bubble3 (>=2018.3.29, <=2018.6.4) +4 more potentially affected by CVE-2026-9318 via tablib (0.12.1)

tablib PYPI version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on tablib and may be impacted: - bitwarden =0.2.2, =2018.3.29, =0.0.1, =0.9.4, =0.0.1, =0.0.4 Source cves: CVE-2026-9318 Source advisory: OSV:PYSEC-2026-3702...

django-cms-qe (1.4.3), django-import-export (2.0.1) +1 more potentially affected by CVE-2026-9318 via tablib (0.14.0)

tablib PYPI version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on tablib and may be impacted: - django-cms-qe 1.4.3 - django-import-export 2.0.1 - iambic 1.0.0 Source cves: CVE-2026-9318 Source advisory: OSV:PYSEC-2026-3702...

bubble (>=2016.3.17, <=2016.8.16), winston (>=0.1.1, <=0.2.3) potentially affected by CVE-2026-9318 via tablib (0.11.2)

tablib PYPI version 0.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on tablib and may be impacted: - bubble =2016.3.17, =0.1.1, =0.2.3 Source cves: CVE-2026-9318 Source advisory: OSV:PYSEC-2026-3702...

cryptocmd (>=0.5.1, <=0.5.2) potentially affected by CVE-2026-9318 via tablib (0.11.4)

tablib PYPI version 0.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on tablib and may be impacted: - cryptocmd =0.5.1, =0.5.2 Source cves: CVE-2026-9318 Source advisory: OSV:PYSEC-2026-3702...

bpp-iplweb (>=202209.1088.0, <=202307.1106.0), iambic (>=1.0.1, <=2.0.0) potentially affected by CVE-2026-9318 via tablib (1.1.0)

tablib PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tablib and may be impacted: - bpp-iplweb =202209.1088.0, =1.0.1, =2.0.0 Source cves: CVE-2026-9318 Source advisory: OSV:PYSEC-2026-3702...

apitestez (>=1.0.35, <=1.1.3), arthexis (>=0.1.3, <=0.11.0) +71 more potentially affected by CVE-2026-9318 via tablib (>=3.0.0, <=3.9.0)

tablib PYPI version =3.0.0, =1.0.35, =0.1.3, =2.0.0, =9.6.4, =9.8.7.1, =202307.1107.0, =8.0.0, =3.12.6, =0.22.10, =6.26.0, =0.6.18, =3.0.0, =3.7.2 and more Source cves: CVE-2026-9318 Source advisory: OSV:PYSEC-2026-3702...

apis-core (>=0.14.0, <=0.14.1), iambic (>=2.0.1, <=2.3.3) +2 more potentially affected by CVE-2026-9318 via tablib (2.0.0)

tablib PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on tablib and may be impacted: - apis-core =0.14.0, =2.0.1, =0.3.0a2, =0.3.0a3 - taccsite-cms 3.6.0a0 Source cves: CVE-2026-9318 Source advisory: OSV:PYSEC-2026-3702...

PT-2026-80673

tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding malicious payloads in dataset titles, which are interpolated unsanitized into HTML output via the export book method in t...

python313-tablib-3.10.0-1.1 on GA media (moderate)

python313-tablib-3.10.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11533-1 Rating: moderate Cross-References: CVE-2026-9318 CVSS scores: CVE-2026-9318 SUSE : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2026-9318 SUSE : 5.3...

OPENSUSE-SU-2026:11533-1 python313-tablib-3.10.0-1.1 on GA media

These are all security issues fixed in the python313-tablib-3.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 46 : python-tablib (2026-d69d02ea41)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d69d02ea41 advisory. Automatic update for python-tablib-3.10.0-1.fc46. Changelog Mon Aug 17 2026 Steve Traylen - 3.10.0-1 - Update to v3.10.0 CVE-2026-9318 - Resolves: rhbz251447...

Fedora 45 : python-tablib (2026-a0344d94aa)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a0344d94aa advisory. Automatic update for python-tablib-3.10.0-1.fc45. Changelog Mon Aug 17 2026 Steve Traylen - 3.10.0-1 - Update to v3.10.0 CVE-2026-9318 - Resolves: rhbz251447...

PT-2026-80581

These are all security issues fixed in the python313-tablib-3.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2026-9318

tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding malicious payloads in dataset titles, which are interpolated unsanitized into HTML output via the exportbook method in th...