PyPI/datasette: medium 4.3
CSRF tokens leaked in URL by canned query form
Action: Upgrade datasette to 0.46 or later.
pip install datasette==0.46Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.46 | - |
Fixed versions
| 0.46 |
Sources
- osv: GHSA-q6j3-c4wc-63vw
- https://github.com/simonw/datasette/security/advisories/GHSA-q6j3-c4wc-63vw
- https://github.com/simonw/datasette/issues/918
- https://github.com/simonw/datasette/commit/7f10f0f7664d474c1be82bf668829e3b736a3d2b
- https://github.com/simonw/datasette
- https://snyk.io/vuln/SNYK-PYTHON-DATASETTE-598229
published · modified · JSON