{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"datasette","cve_ids":["CVE-2023-40570"],"ecosystem":"PyPI","epss":0.00555,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7ch3-7pp7-7cpq","id":"tcs_01M5KGJJSMBTD2967BAVQRGB83","modified_at":"2025-10-09T08:24:24.812087Z","published_at":"2023-08-25T01:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-154","https://github.com/simonw/datasette/security/advisories/GHSA-7ch3-7pp7-7cpq","https://github.com/simonw/datasette/commit/01e0558825b8f7ec17d3b691aa072daf122fcc74"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"PYSEC-2023-154","url":"https://osv.dev/vulnerability/PYSEC-2023-154"}],"summary":"Datasette is an open source multi-tool for exploring and publishing data. This bug affects Datasette instances running a Datasette 1.0 alpha - 1.0a0, 1.0a1, 1.0a2 or 1.0a3 - in an online accessible lo"}