CVE-2017-2810: An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4.

Security readout for executives and security teams

Tablib 0.11.4 can run attacker-controlled Python when an application loads a malicious YAML Databook. The business risk is high when external files, uploads, integrations, or customer-provided data are imported through Tablib. Successful exploitation could let an attacker execute commands with the application’s privileges. Exposure is most likely in Python services, admin tools, or data import workflows that use Tablib 0.11.4 to load YAML Databooks from untrusted or semi-trusted sources. Internal-only batch jobs are lower risk unless they consume external files. Prioritize remediation for internet-facing, customer-facing, or partner-facing import workflows. Treat isolated internal uses as lower urgency but still schedule cleanup because the impact is full command execution if a malicious file is loaded. Mitigation focus: Inventory and remove Tablib 0.11.4 where possible.; Check Tablib and distribution advisories for supported fixed packages.; Block untrusted YAML Databook imports until remediation is confirmed..

Prepared

May 24, 2026, 09:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.