Vulnerabilities in duckdb

4 results

CVE-2024-41672HIGHDuckDB: sniff_csv provides filesystem access even when enable_external_access is disabledEPSS 0.8%CVE-2026-58139MEDIUMDuckDB AWS Extension Security Policy Bypass via load_aws_credentials ProcedureEPSS 0.5%CVE-2025-59037HIGHDuckDB NPM packages 1.3.3 and 1.29.2 briefly compromised with malwareEPSS 0.4%CVE-2025-64429MEDIUMDuckDB Encryption Crypto implementation is vulnerableEPSS 0.1%