{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"sqlite-web","cve_ids":["CVE-2021-23404"],"ecosystem":"PyPI","epss":0.00477,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2j58-pwwv-x666","id":"tcs_01M5KGCDV8RZX5K9RFD5HG7HHK","modified_at":"2025-10-09T07:34:55.397394Z","published_at":"2021-09-08T11:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-332","https://github.com/coleifer/sqlite-web/blob/2e7c85da3d37f80074ed3ae39b5851069b4f301c/sqlite_web/__main__.py%23L1","https://snyk.io/vuln/SNYK-PYTHON-SQLITEWEB-1316324","https://github.com/advisories/GHSA-2j58-pwwv-x666"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-332","url":"https://osv.dev/vulnerability/PYSEC-2021-332"}],"summary":"This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable"}