{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.6.5"}],"component":"sqlite-web","cve_ids":["CVE-2021-23404"],"ecosystem":"PyPI","epss":0.00477,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2j58-pwwv-x666","id":"tcs_01M5KESQ32KG0A1C9E5ABK6G9N","modified_at":"2025-11-27T09:33:45.567353Z","published_at":"2021-09-09T17:10:35Z","references":["https://osv.dev/vulnerability/GHSA-2j58-pwwv-x666","https://nvd.nist.gov/vuln/detail/CVE-2021-23404","https://github.com/coleifer/sqlite-web","https://github.com/coleifer/sqlite-web/blob/2e7c85da3d37f80074ed3ae39b5851069b4f301c/sqlite_web/__main__.py","https://github.com/coleifer/sqlite-web/blob/4ba53979eb342c69fb3b7a75eeed43da7a3d3822/sqlite_web/sqlite_web.py#L1338","https://github.com/pypa/advisory-database/tree/main/vulns/sqlite-web/PYSEC-2021-332.yaml","https://snyk.io/vuln/SNYK-PYTHON-SQLITEWEB-1316324"],"severity":{"label":"high","score":7.6},"sources":[{"source":"osv","source_id":"GHSA-2j58-pwwv-x666","url":"https://osv.dev/vulnerability/GHSA-2j58-pwwv-x666"}],"summary":"Cross-Site Request Forgery in sqlite-web"}