Browse all 11 CVE security advisories affecting OpenRefine. AI-powered Chinese analysis, POCs, and references for each vulnerability.
OpenRefine serves as a powerful tool for cleaning and transforming messy data, enabling users to explore and refine datasets through an interactive interface. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, with 11 CVEs documented to date. The application's web-based nature and data processing capabilities have made it a target for security researchers, though no major public incidents have been widely reported. Users should remain vigilant about input validation and access controls when deploying this tool in production environments, as its data manipulation features could be exploited if proper security measures are not implemented.
This page lists every published CVE security advisory associated with OpenRefine. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.