CVE-2023-7333

Published January 7th, 2026

View on NVD ↗

CVSS v3

5.3

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

A weakness has been identified in bluelabsio records-mover up to 1.5.4. The affected element is an unknown function of the component Table Object Handler. This manipulation causes sql injection. The attack needs to be launched locally. Upgrading to version 1.6.0 is sufficient to fix this issue. Patch name: 3f8383aa89f45d861ca081e3e9fd2cc9d0b5dfaa. You should upgrade the affected component.

bluelabsio/records-mover

Python library and CLI you can use to move relational data from one place to another - DBs/CSV/gsheets/dataframes/...

GitHub