CVE-2023-39654: Abuquant Abupy

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

abupy up to v0.4.0 was discovered to contain a SQL injection vulnerability via the component abupy.MarketBu.ABuSymbol.search_to_symbol_dict.

Affected products

• Abuquant Abupy: up to and including 0.4.0

Published 2023-09-05. Last modified 2026-06-17.