Skip to content
OpenAdvisories

Package · Ubuntu

python-tablib

2 known vulnerabilities.

2 results · Feed

  • Medium 5.4

    tablib versions prior to 3.10.0 Stored XSS via HTML Export Dataset Title

    tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding malicious payloads in dataset titles, which are interpolated unsanitized into HTML …

  • High 7.5

    Loaded Databook of Tablib prone to python insertion resulting in command execution

    An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. An attacker can insert python into loaded yaml to trigger this vulnerabili…