Vulnerabilities for datasette

First version without a known vulnerability: 0.65.2

Details

• GHSA-w832-gg5g-x44m2025-11-06

  Open redirect endpoint in Datasette

  Fixed in: 0.65.2, 1.0a21

• GHSA-7ch3-7pp7-7cpq2023-08-22

  Datasette 1.0 alpha series leaks names of databases and tables to unauthenticated users

  Fixed in: 1.0a4, 01e0558825b8f7ec17d3b691aa072daf122fcc74

• GHSA-xw7c-jx9m-xh5g2021-06-07

  Reflected cross-site scripting issue in Datasette

  Fixed in: 0.56.1

• GHSA-q6j3-c4wc-63vw2020-08-11

  CSRF tokens leaked in URL by canned query form

  Fixed in: 0.46