Lucene search
+L

3 matches found

RedhatCVE
RedhatCVE
•added 2026/03/07 7:59 a.m.•10 views

CVE-2026-28438

CocoIndex is a data transformation framework for AI. Prior to version 0.3.34, the Doris target connector didn't verify the configured table name before creating some SQL statements ALTER TABLE. So, in the application code, if the table name is provided by an untrusted upstream, it expose...

9.8CVSS5.8AI score0.00516EPSS
SaveExploits0References1
OSV
OSV
•added 2026/03/06 7:15 a.m.•21 views

PYSEC-2026-2133

CocoIndex is a data transformation framework for AI. Prior to version 0.3.34, the Doris target connector didn't verify the configured table name before creating some SQL statements ALTER TABLE. So, in the application code, if the table name is provided by an untrusted upstream, it expose...

9.8CVSS6.1AI score0.00516EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/06 7:15 a.m.•21 views

CVE-2026-28438

CocoIndex is a data transformation framework for AI. Prior to version 0.3.34, the Doris target connector didn't verify the configured table name before creating some SQL statements ALTER TABLE. So, in the application code, if the table name is provided by an untrusted upstream, it expose...

9.8CVSS0.00516EPSS
SaveExploits0References2
Rows per page
Query Builder