{"action":"Upgrade datasette to 0.46 or later.","affected":[{"fixed":"0.46","introduced":"0"}],"component":"datasette","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["0.46"],"ghsa_id":"GHSA-q6j3-c4wc-63vw","id":"tcs_01M5KFVG541WQS52CWWN4RMAH9","modified_at":"2024-12-02T05:44:09.099874Z","published_at":"2020-08-11T14:54:40Z","references":["https://osv.dev/vulnerability/GHSA-q6j3-c4wc-63vw","https://github.com/simonw/datasette/security/advisories/GHSA-q6j3-c4wc-63vw","https://github.com/simonw/datasette/issues/918","https://github.com/simonw/datasette/commit/7f10f0f7664d474c1be82bf668829e3b736a3d2b","https://github.com/simonw/datasette","https://snyk.io/vuln/SNYK-PYTHON-DATASETTE-598229"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-q6j3-c4wc-63vw","url":"https://osv.dev/vulnerability/GHSA-q6j3-c4wc-63vw"}],"summary":"CSRF tokens leaked in URL by canned query form"}