PyPI/datasette CVE-2025-64481: low 2.7, EPSS 0.41%

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability.

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

• osv: PYSEC-2025-73
• nvd: CVE-2025-64481
• https://github.com/simonw/datasette/security/advisories/GHSA-w832-gg5g-x44m
• https://github.com/simonw/datasette/issues/2429
• https://github.com/simonw/datasette/commit/f257ca6edb64848c3b04b54d41e347c54fe57c05

CVE-2025-64481 · published 2025-11-07T21:15:42.010Z · modified 2026-05-19T05:15:05.313924531Z · JSON