GCVE-110-PYPI-2026-020936

Advisory Published

Vulnetix · Advisory published October 14, 2026

[P-CURL-PIPE] curl output piped to shell (download-and-execute) — matched: You need [`uv`](https://docs.astral.sh/uv/) (`curl -LsSf https://astral.sh/uv/install.sh | sh`) and a Tableau [Personal Access Token](https://help.tableau.com/current/server/en-us/security_personal_access_tokens.htm).

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Affected Products

Vendor	Product	Versions	Platforms
pypi	tableau-graphql-mcp	0.2.0 (affected)	—

References

advisory

web

Browse GCVE Records

5,487 records in the GCVE database · Updated October 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON