pypi tablib vulnerabilities

Latest pypi tablib CVEs

Newest publication first

1. CVE-2026-9318 tablib versions prior to 3.10.0 Stored XSS via HTML Export Dataset Title

   Published 2026-08-12

   Medium·CVSS 4.8 EPSS 0.30%

   tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding malicious payloads in dataset titles, which are interpolated unsanitized into HTML output via the export...

2. CVE-2017-2810 Loaded Databook of Tablib prone to python insertion resulting in command execution

   Published 2017-06-14

   Critical·CVSS 9.8 EPSS 4.9%

   An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. An attacker can insert python into loaded yaml to trigger this vulnerability.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.