https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 07:31:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-168014 EUVD-2026-168014 https://cve.radiocsirt.org/vuln/euvd-2026-168014 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23404 <p>This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Request Forgery (CSRF) attack.</p> <p>This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Request Forgery (CSRF) attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-23404 https://cve.radiocsirt.org/vuln/ghsa-2j58-pwwv-x666 <p><strong>Affected:</strong> PyPI: sqlite-web</p> <p>This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Request Forgery (CSRF) attack.</p> <p><strong>Affected:</strong> PyPI: sqlite-web</p> <p>This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Request Forgery (CSRF) attack.</p> https://cve.radiocsirt.org/vuln/ghsa-2j58-pwwv-x666 https://cve.radiocsirt.org/vuln/gsd-2021-23404 gsd-2021-23404 https://cve.radiocsirt.org/vuln/gsd-2021-23404 https://cve.radiocsirt.org/vuln/pysec-2021-332 <p><strong>Affected:</strong> PyPI: sqlite-web</p> <p>This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Request Forgery (CSRF) attack.</p> <p><strong>Affected:</strong> PyPI: sqlite-web</p> <p>This affects all versions of package sqlite-web. The SQL dashboard area allows sensitive actions to be performed without validating that the request originated from the application. This could enable an attacker to trick a user into performing these actions unknowingly through a Cross Site Request Forgery (CSRF) attack.</p> https://cve.radiocsirt.org/vuln/pysec-2021-332