Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/pycsw@1.8.6
purl pkg:pypi/pycsw@1.8.6
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-4tca-fufm-qydy A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL (at least) it is possible to perform updates/inserts/deletes and database modifications to any table the database user has access to. CVE-2016-8640
GHSA-hg4c-rgvm-964g
PYSEC-2018-98

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-31T00:50:25.841250+00:00 GHSA Importer Fixing VCID-4tca-fufm-qydy https://github.com/advisories/GHSA-hg4c-rgvm-964g 38.6.0
2026-05-30T20:54:05.528943+00:00 GitLab Importer Fixing VCID-4tca-fufm-qydy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/pycsw/CVE-2016-8640.yml 38.6.0
2026-05-30T20:17:53.699008+00:00 Pypa Importer Fixing VCID-4tca-fufm-qydy https://github.com/pypa/advisory-database/blob/main/vulns/pycsw/PYSEC-2018-98.yaml 38.6.0