datasette (>=0.14.0, <=0.28.0), datasette-core (0.22.1) +13 more potentially affected by CVE-2026-85078 via sanic (0.7.0)

sanic PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - datasette =0.14.0, =0.1.0, =1.0.3, =0.8.8, =0.1.0, =0.4.3, =0.1.5, =1.1.4 - slashcommands 0.4.0 - turingnetwork 0.1.1 Source cves: CVE-2026-85078 Sour...

allennlp (>=0.1.0a6, <=0.3.0), datasette (>=0.8.0, <=0.13.0) +1 more potentially affected by CVE-2026-85078 via sanic (0.6.0)

sanic PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - allennlp =0.1.0a6, =0.8.0, =0.6.0.0, =0.6.0.1 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

allennlp (>=0.1.0a6, <=0.3.0), datasette (>=0.8.0, <=0.13.0) +1 more potentially affected by CVE-2026-85078 via sanic (0.6.0)

sanic PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - allennlp =0.1.0a6, =0.8.0, =0.6.0.0, =0.6.0.1 Source cves: CVE-2026-85078 Source advisory: OSV:GHSA-WMJ6-G64G-J7Q5...

datasette (>=0.14.0, <=0.28.0), datasette-core (0.22.1) +13 more potentially affected by CVE-2026-85078 via sanic (0.7.0)

sanic PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - datasette =0.14.0, =0.1.0, =1.0.3, =0.8.8, =0.1.0, =0.4.3, =0.1.5, =1.1.4 - slashcommands 0.4.0 - turingnetwork 0.1.1 Source cves: CVE-2026-85078 Sour...

datasette-sqlite-vec (>=0.1.1a2, <=0.1.3a3), sqlite-utils-sqlite-vec (>=0.1.1a2, <=0.1.3a3) +1 more potentially affected by CVE-2024-46488 via sqlite-vec (>=0.1.1a2, <=0.1.3a3)

sqlite-vec PYPI version =0.1.1a2, =0.1.1a2, =0.1.1a2, =0.1.3a3 - zf-memician 0.1.3 Source cves: CVE-2024-46488 Source advisory: OSV:PYSEC-2026-1938...

datasette (>=0.14.0, <=0.28.0), datasette-core (0.22.1) +13 more potentially affected by CVE-2022-35920 via sanic (0.7.0)

sanic PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - datasette =0.14.0, =0.1.0, =1.0.3, =0.8.8, =0.1.0, =0.4.3, =0.1.5, =1.1.4 - slashcommands 0.4.0 - turingnetwork 0.1.1 Source cves: CVE-2022-35920 Sour...

allennlp (>=0.1.0a6, <=0.3.0), datasette (>=0.8.0, <=0.13.0) +1 more potentially affected by CVE-2022-35920 via sanic (0.6.0)

sanic PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - allennlp =0.1.0a6, =0.8.0, =0.6.0.0, =0.6.0.1 Source cves: CVE-2022-35920 Source advisory: OSV:PYSEC-2026-918...

CVE-2025-64481

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

PYSEC-2025-73

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

PYSEC-2025-73

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

CVE-2025-64481

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

CVE-2025-64481 Open redirect endpoint in Datasette

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

CVE-2025-64481

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

CVE-2025-64481

CVE-2025-64481 affects Datasette, an open-source data exploration/publishing tool. The vulnerability is an open redirect in deployed instances of Datasette versions 0.65.1 and earlier, and 1.0a0 through 1.0a19, triggered by requests to a path containing double slashes (for example, //example.com/...

CVE-2025-64481 Open redirect endpoint in Datasette

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

aws-session-recorder (>=0.2.0, <=0.2.2), chasten (>=0.1.0, <=1.0.0) +10 more potentially affected by CVE-2025-64481 via datasette (>=0.37.1, <=0.64.8)

datasette PYPI version =0.37.1, =0.2.0, =0.1.0, =0.1.1a0, =2.0.0, =0.2.0, =0.1.0, =0.1.8 Source cves: CVE-2025-64481 Source advisory: MEND:CVE-2025-64481...

datasette-acl (0.4.0a5), datasette-alerts (0.0.1a5) +23 more potentially affected by CVE-2025-64481 via datasette (>=1.0.0a7, <=1.0.0a19)

datasette PYPI version =1.0.0a7, =0.0.1a1, =0.1.0a3, =0.1.0a5 and more Source cves: CVE-2025-64481 Source advisory: MEND:CVE-2025-64481...

CVE-2025-64481 Open redirect endpoint in Datasette

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

EUVD-2025-38040

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

CVE-2025-64481

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...