GitHub Advisoryadvisory · PyPI

GHSA-p3jp-7gj7-h6pr records-mover Injection vulnerability

MEDIUM Published 2026-01-08 Modified 2026-01-08 Official page ↗
Aliases
CVE-2023-7333
Ecosystem
PyPI
Packages
records-mover
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-74
Reviewed
2026-01-08

Affected packages

• PyPI records-mover: < 1.6.0 → fixed in 1.6.0

Description

A weakness has been identified in bluelabsio records-mover up to 1.5.4. The affected element is an unknown function of the component Table Object Handler. This manipulation causes SQL Injection. The attack needs to be launched locally. Upgrading to version 1.6.0 is sufficient to fix this issue. Patch name: 3f8383aa89f45d861ca081e3e9fd2cc9d0b5dfaa. Developers should upgrade the affected component.

Related

Alias · CVE (1)

  • CVE-2023-7333 A weakness has been identified in bluelabsio records-mover up to 1.5.4. vulnerability

Weakness · CWE (1)

  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness

References