@biztory/n8n-nodes-tableau-rest-api (>=0.1.13, <=0.1.14), @blinkk/root-cms (>=3.5.2, <=4.1.2) +129 more potentially affected by CVE-2026-113657 via sanitize-html (2.17.7)

sanitize-html NPM version 2.17.7 is affected by a known vulnerability. The following packages have a transitive dependency on sanitize-html and may be impacted: - @biztory/n8n-nodes-tableau-rest-api =0.1.13, =3.5.2, =12.3.0-depup.0, =39.0.0, =9.0.2, =0.0.0-dummy.1, =0.29.2, =0.1.0, =0.10.2,...

Salesforce Tableau Server - Detect

Detects Salesforce Tableau Server and extracts the buildid. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Salesforce Tableau Server and extracts the buildid.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

Tableau Services Manager Login Panel - Detect

Tableau Services Manager login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tableau Services Manager login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tableau Services...

Tableau Python Server Panel - Detect

Tableau Python Server panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Tableau Python Server panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Tableau Python Server Panel - Detect',...

sqlfluff-templater-dbt (2.1.0), tableau-sql-parser (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-46373 via sqlfluff (2.1.0)

sqlfluff PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.1.0 - tableau-sql-parser =0.1.0, =0.1.1 Source cves: CVE-2026-46373 Source advisory: OSV:PYSEC-2026-209...

sqlfluff-templater-dbt (2.1.0), tableau-sql-parser (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-46374 via sqlfluff (2.1.0)

sqlfluff PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.1.0 - tableau-sql-parser =0.1.0, =0.1.1 Source cves: CVE-2026-46374 Source advisory: OSV:PYSEC-2026-210...

sqlfluff-templater-dbt (2.1.0), tableau-sql-parser (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-46374 via sqlfluff (2.1.0)

sqlfluff PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.1.0 - tableau-sql-parser =0.1.0, =0.1.1 Source cves: CVE-2026-46374 Source advisory: OSV:GHSA-73JC-5MRQ-PRW7...

sqlfluff-templater-dbt (2.1.0), tableau-sql-parser (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-46373 via sqlfluff (2.1.0)

sqlfluff PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 2.1.0 - tableau-sql-parser =0.1.0, =0.1.1 Source cves: CVE-2026-46373 Source advisory: OSV:GHSA-WMHF-FQC8-VXHH...

Malicious code in @tableau__catalog-messages/database_lower (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5dccfd38a9044fa0a913f89d7e3524165214f08cd62e40f8904682ca1fae10b The package contains two files and no static or traced indicators of installer-side harm. No lifecycle scripts fetching or executing remote content, ...

MAL-2026-2866 Malicious code in @tableau__catalog-messages/database_lower (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5dccfd38a9044fa0a913f89d7e3524165214f08cd62e40f8904682ca1fae10b The package contains two files and no static or traced indicators of installer-side harm. No lifecycle scripts fetching or executing remote content, ...

Tableau Server Code Execution

The vulnerability of the Tableau Server analytical platform is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Tableau Server SSRF

The vulnerability of the Tableau Server analytical platform is related to insufficient validation of queries on the server side. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack remotely...

CVE-2025-11817

The Simple Tableau Viz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableau' shortcode in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-11817

The Simple Tableau Viz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableau' shortcode in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

EUVD-2025-35328

The Simple Tableau Viz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableau' shortcode in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-11817 Simple Tableau Viz <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Simple Tableau Viz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableau' shortcode in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-11817

CVE-2025-11817 affects the WordPress plugin Simple Tableau Viz (versions ≤ 2.0). The root cause is insufficient input sanitization and output escaping on the tableau shortcode, enabling stored cross-site scripting. The issue is exploitable by authenticated users with contributor-level access or h...

CVE-2025-11817 Simple Tableau Viz <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Simple Tableau Viz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableau' shortcode in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

WordPress Simple Tableau Viz plugin <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by zakaria in WordPress Plugin Simple Tableau Viz versions = 2.0...

CVE-2025-11817: Improper Neutralization of Input During Web Page Generation

The Simple Tableau Viz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableau' shortcode in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...