Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Jazzband Clear all filters
TI-2026-08179 CVE-2026-9318 · GHSA-gqgw-jghv-mxwx

tablib versions prior to 3.10.0 Stored XSS via HTML Export Dataset Title

Priority LOW 22

tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding malicious payloads in dataset titles, which…

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00298 Published 2026-08-12 Partial fix · 3.10.0 CWE-79
TI-2021-10864 CVE-2021-30459 · GHSA-pghf-347x-c2gj

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1…

Priority MEDIUM 46

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the raw_sql input field of the SQL expl…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01941 Published 2021-04-14 Fixed in 1.11.1, 2.2.1 +1 CWE-89