Homepage
About Snyk

django-sql-dashboard@0.2a2 vulnerabilities

Django app for building dashboards using raw SQL queries

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the django-sql-dashboard package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Insecure Permissions

django-sql-dashboard is a provides an authenticated interface for executing read-only SQL queries directly against your PostgreSQL database, bringing a useful subset of Datasette to Django.

Affected versions of this package are vulnerable to Insecure Permissions. Users without the execute_sql permission could still run custom queries by editing saved dashboards using the Django admin interface.

How to fix Insecure Permissions?

Upgrade django-sql-dashboard to version 0.14 or higher.

[,0.14)
Go back to all versions of this package