Frictionlessdata vulnerabilities
We track 1 vulnerability in Frictionlessdata products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 23, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Frictionlessdata vulnerabilities
- 8.8 High severity
frictionless-py: Improper Neutralization of Special Elements used in an OS Command
Frictionless before 5.19.1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to execute arbitrary operating system commands as the user who explores it. Attacker