apis-core (>=0.14.0, <=0.14.1), apitestez (>=1.0.35, <=1.1.3) +83 more potentially affected by CVE-2026-9318 via tablib (>=0.11.2, <=3.9.0)

tablib PYPI version =0.11.2, =0.14.0, =1.0.35, =0.1.3, =2.0.0, =0.2.2, =9.6.4, =9.8.7.1, =202209.1088.0, =2016.3.17, =2018.3.29, =8.0.0, =3.12.6, =0.22.10, =6.26.0, =8.15.2 and more Source cves: CVE-2026-9318 Source advisory: MEND:CVE-2026-9318...

CVE-2026-9318 tablib versions prior to 3.10.0 Stored XSS via HTML Export Dataset Title

tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding malicious payloads in dataset titles, which are interpolated unsanitized into HTML output via the exportbook method in th...

EUVD-2026-57063

tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding malicious payloads in dataset titles, which are interpolated unsanitized into HTML output via the exportbook method in th...

CVE-2026-9318 tablib versions prior to 3.10.0 Stored XSS via HTML Export Dataset Title

tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding malicious payloads in dataset titles, which are interpolated unsanitized into HTML output via the exportbook method in th...

CVE-2026-9318

tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding malicious payloads in dataset titles, which are interpolated unsanitized into HTML output via the exportbook method in th...

Linux Distros Unpatched Vulnerability : CVE-2026-9318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScri...

PT-2026-75970

tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding malicious payloads in dataset titles, which are interpolated unsanitized into HTML output via the export book method in t...

PT-2026-70978

Name of the Vulnerable Software and Affected Versions tablib versions prior to 3.10.0 Description A stored cross-site scripting issue exists in the HTML export functionality. Attackers can execute arbitrary JavaScript by embedding malicious payloads in dataset titles. This occurs when the export...

CVE-2026-9318: Improper Neutralization of Input During Web Page Generation

tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding malicious payloads in dataset titles, which are interpolated unsanitized into HTML output via the exportbook method in th...

EUVD-2017-0134

Malware in sbrugna...

SUSE CVE-2017-2810

An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. An attacker can insert python into loaded yaml to trigger this vulnerability...

SUSE: Security Advisory (SUSE-SU-2017:2105-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tablib Databook Loading Functionality Remote Code Execution (CVE-2017-2810)

A remote code execution vulnerability exists in the Databook loading functionality of Python Tablib library. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

Tablib: Arbitrary command execution

Background Tablib is an MIT Licensed format-agnostic tabular dataset library, written in Python. It allows you to import, export, and manipulate tabular data sets. Description A vulnerability was discovered in Tablib’s Databook loading functionality, due to improper input validation. Impact A...

GLSA-201811-18 : Tablib: Arbitrary command execution

The remote host is affected by the vulnerability described in GLSA-201811-18 Tablib: Arbitrary command execution A vulnerability was discovered in Tablibs Databook loading functionality, due to improper input validation. Impact : A remote attacker, by enticing the user to process a specially...

bubble (>=2016.3.17, <=2016.8.16), cryptocmd (>=0.5.1, <=0.5.2) +1 more potentially affected by CVE-2017-2810 via tablib (>=0.11.2, <=0.11.4)

tablib PYPI version =0.11.2, =2016.3.17, =0.5.1, =0.1.1, =0.2.3 Source cves: CVE-2017-2810 Source advisory: OSV:GHSA-GCR6-RF47-JRGF...

bubble (>=2016.3.17, <=2016.8.16), cryptocmd (>=0.5.1, <=0.5.2) +1 more potentially affected by CVE-2017-2810 via tablib (>=0.11.2, <=0.11.4)

tablib PYPI version =0.11.2, =2016.3.17, =0.5.1, =0.1.1, =0.2.3 Source cves: CVE-2017-2810 Source advisory: GHSA-GCR6-RF47-JRGF...

GHSA-GCR6-RF47-JRGF Loaded Databook of Tablib prone to python insertion resulting in command execution

An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. An attacker can insert python into loaded yaml to trigger this vulnerability...

Loaded Databook of Tablib prone to python insertion resulting in command execution

An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. An attacker can insert python into loaded yaml to trigger this vulnerability...

Databook loading library YAML Command Execution

The vulnerability of the yaml.load function in the Databook loading library of the Python Tablib library is related to the lack of measures for cleaning input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...