Skip to content
OpenAdvisories

Vendor

simonw

3 known vulnerabilities.

Products

datasette 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2023-40570

    Datasette 1.0 alpha series leaks names of databases and tables to unauthenticated users

    Datasette is an open source multi-tool for exploring and publishing data. This bug affects Datasette instances running a Datasette 1.0 alpha - 1.0a0, 1.0a1, 1.0a2 or 1.0a3 - in an online accessible location but with authentication enabled using a plugin such …

    simonw datasette datasette PyPI