MEDIUM5.3PyPI
GHSA-7ch3-7pp7-7cpq· CVE-2023-40570, PYSEC-2023-154Datasette 1.0 alpha series leaks names of databases and tables to unauthenticated users
Modified: 6/9/2026
package
PyPI/datasette
pkg:pypi/datasette
MEDIUM4.3PyPI
GHSA-q6j3-c4wc-63vwCSRF tokens leaked in URL by canned query form
Modified: 12/2/2024
LOWPyPI
GHSA-w832-gg5g-x44m· CVE-2025-64481, PYSEC-2025-73Open redirect endpoint in Datasette
Modified: 5/19/2026
HIGH7.2PyPI
GHSA-xw7c-jx9m-xh5g· CVE-2021-32670, GHSA-gff3-739c-gxfqReflected cross-site scripting issue in Datasette
Modified: 7/8/2026
—PyPI
PYSEC-2021-89· CVE-2021-32670, GHSA-gff3-739c-gxfqModified: 11/8/2023
MEDIUM5.3PyPI
PYSEC-2023-154· CVE-2023-40570, GHSA-7ch3-7pp7-7cpqModified: 10/9/2025
—PyPI
PYSEC-2025-73· CVE-2025-64481, GHSA-w832-gg5g-x44mModified: 5/19/2026