Lucene search
+L

7 matches found

NVD
NVD
added 2026/07/28 11:17 p.m.13 views

CVE-2026-54658

Hypequery is a TypeScript semantic layer for ClickHouse. Prior to 2.5.1, escapeValue in packages/clickhouse/src/core/utils.ts did not escape backslashes before single quotes during parameter substitution, allowing attacker controlled query parameters with a trailing backslash to escape the closin...

9.8CVSS0.0044EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/28 10:19 p.m.9 views

GHSA-6WCC-39RP-HH9P @hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution

A SQL injection vulnerability exists in the escapeValue function used for parameter substitution. escapeValue dispatches on the type of the parameter value, and two of its branches failed to escape safely. An attacker who can control a parameter value can terminate the enclosing string literal an...

9.8CVSS5.8AI score0.0044EPSS
SaveExploits0References10
Github Security Blog
Github Security Blog
added 2026/07/28 10:19 p.m.18 views

@hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution

A SQL injection vulnerability exists in the escapeValue function used for parameter substitution. escapeValue dispatches on the type of the parameter value, and two of its branches failed to escape safely. An attacker who can control a parameter value can terminate the enclosing string literal an...

9.8CVSS5.8AI score0.0044EPSS
SaveExploits0References10Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/28 10:18 p.m.10 views

CVE-2026-54658

Hypequery is a TypeScript semantic layer for ClickHouse. Prior to 2.5.1, escapeValue in packages/clickhouse/src/core/utils.ts did not escape backslashes before single quotes during parameter substitution, allowing attacker controlled query parameters with a trailing backslash to escape the closin...

9.8CVSS5.6AI score0.0044EPSS
SaveExploits0References9Affected Software1
CVE
CVE
added 2026/07/28 10:18 p.m.45 views

CVE-2026-54658

Hypequery/clickhouse (TypeScript semantic layer for ClickHouse) contains a SQL injection due to escapeValue() not escaping backslashes before single quotes during parameter substitution in packages/clickhouse/src/core/utils.ts, prior to version 2.0.2. This allows attacker-controlled query paramet...

9.8CVSS5.6AI score0.0044EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/07/28 10:18 p.m.41 views

CVE-2026-54658 @hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution

Hypequery is a TypeScript semantic layer for ClickHouse. Prior to 2.5.1, escapeValue in packages/clickhouse/src/core/utils.ts did not escape backslashes before single quotes during parameter substitution, allowing attacker controlled query parameters with a trailing backslash to escape the closin...

9.8CVSS0.0044EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/28 10:18 p.m.7 views

CVE-2026-54658 @hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution

Hypequery is a TypeScript semantic layer for ClickHouse. Prior to 2.5.1, escapeValue in packages/clickhouse/src/core/utils.ts did not escape backslashes before single quotes during parameter substitution, allowing attacker controlled query parameters with a trailing backslash to escape the closin...

9.8CVSS5.5AI score
SaveExploits0References10
Rows per page
Query Builder