Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 21:04:14 +0000 CVE-2023-7333 — bluelabsio records-mover Table Object sql injection https://cve.radiocsirt.org/vuln/cve-2023-7333 <p><strong>Affected:</strong> bluelabsio records-mover</p> <p>A weakness has been identified in bluelabsio records-mover up to 1.5.4. The affected element is an unknown function of the component Table Object Handler. This manipulation causes sql injection. The attack needs to be launched locally. Upgrading to version 1.6.0 is sufficient to fix this issue. Patch name: 3f8383aa89f45d861ca081e3e9fd2cc9d0b5dfaa. You should upgrade the affected component.</p> <p><strong>Affected:</strong> bluelabsio records-mover</p> <p>A weakness has been identified in bluelabsio records-mover up to 1.5.4. The affected element is an unknown function of the component Table Object Handler. This manipulation causes sql injection. The attack needs to be launched locally. Upgrading to version 1.6.0 is sufficient to fix this issue. Patch name: 3f8383aa89f45d861ca081e3e9fd2cc9d0b5dfaa. You should upgrade the affected component.</p> https://cve.radiocsirt.org/vuln/cve-2023-7333 PYSEC-2026-1864 — records-mover Injection vulnerability https://cve.radiocsirt.org/vuln/pysec-2026-1864 <p><strong>Affected:</strong> PyPI: records-mover</p> <p>A weakness has been identified in bluelabsio records-mover up to 1.5.4. The affected element is an unknown function of the component Table Object Handler. This manipulation causes SQL Injection. The attack needs to be launched locally. Upgrading to version 1.6.0 is sufficient to fix this issue. Patch name: 3f8383aa89f45d861ca081e3e9fd2cc9d0b5dfaa. Developers should upgrade the affected component.</p> <p><strong>Affected:</strong> PyPI: records-mover</p> <p>A weakness has been identified in bluelabsio records-mover up to 1.5.4. The affected element is an unknown function of the component Table Object Handler. This manipulation causes SQL Injection. The attack needs to be launched locally. Upgrading to version 1.6.0 is sufficient to fix this issue. Patch name: 3f8383aa89f45d861ca081e3e9fd2cc9d0b5dfaa. Developers should upgrade the affected component.</p> https://cve.radiocsirt.org/vuln/pysec-2026-1864