CVE-2026-93349 | frictionlessdata frictionless-py up to 5.20.0rc1 Console datapackage.json os.system os command injection

September 23, 2026 Yanac

A vulnerability was found in frictionlessdata frictionless-py up to 5.20.0rc1. It has been rated as critical. Affected is the function os.system of the file datapackage.json of the component Console. This manipulation causes os command injection.

This vulnerability is registered as CVE-2026-93349. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More