Skip to content
OpenAdvisories

Vendor

simonw

3 known vulnerabilities.

Products

datasette 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2021-32670

    Reflected cross-site scripting issue in Datasette

    Datasette is an open source multi-tool for exploring and publishing data. The `?_trace=1` debugging feature in Datasette does not correctly escape generated HTML, resulting in a [reflected cross-site scripting](https://owasp.org/www-community/attacks/xss/#ref…

    simonw datasette datasette PyPI