Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/pycsw@2.0.1
purl pkg:pypi/pycsw@2.0.1
Next non-vulnerable version 2.0.2
Latest non-vulnerable version 2.0.2
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-4tca-fufm-qydy
Aliases:
CVE-2016-8640
GHSA-hg4c-rgvm-964g
PYSEC-2018-98
A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL (at least) it is possible to perform updates/inserts/deletes and database modifications to any table the database user has access to.
2.0.2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-30T20:17:53.571203+00:00 Pypa Importer Affected by VCID-4tca-fufm-qydy https://github.com/pypa/advisory-database/blob/main/vulns/pycsw/PYSEC-2018-98.yaml 38.6.0