simonw

Products

ProductCVEsExploitedLatest
datasette3–Nov 7, 2025

Exploited and recent CVEs

  • CVE-2025-64481 Low 2.7 Open redirect endpoint in Datasette 0.4%
  • CVE-2023-40570 Medium 5.3 Datasette 1.0 alpha series leaks names of databases and tables to unauthenticated users 0.6%
  • CVE-2021-32670 High 7.2 Reflected cross-site scripting issue in Datasette 1.0%