Skip to content

Vendor

frictionlessdata vulnerabilities

1 published CVE affecting frictionlessdata, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of frictionlessdata alerts

Products

Latest frictionlessdata CVEs

Newest publication first

  1. CVE-2026-93349 Frictionless OS Command Injection via explore Console Command

    Published
    HighCVSS 8.6

    Frictionless before 5.19.1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to execute arbitrary operating system commands as the user who explores it. Attackers can place shell me...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.