Lucene search
+L

3 matches found

RedhatCVE
RedhatCVE
added 2026/03/07 7:59 a.m.7 views

CVE-2026-28438

CocoIndex is a data transformation framework for AI. Prior to version 0.3.34, the Doris target connector didn't verify the configured table name before creating some SQL statements ALTER TABLE. So, in the application code, if the table name is provided by an untrusted upstream, it expose...

9.8CVSS5.8AI score0.00282EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/06 7:15 a.m.6 views

PYSEC-2026-2133

CocoIndex is a data transformation framework for AI. Prior to version 0.3.34, the Doris target connector didn't verify the configured table name before creating some SQL statements ALTER TABLE. So, in the application code, if the table name is provided by an untrusted upstream, it expose...

9.8CVSS6.1AI score0.00282EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/06 7:15 a.m.14 views

CVE-2026-28438

CocoIndex is a data transformation framework for AI. Prior to version 0.3.34, the Doris target connector didn't verify the configured table name before creating some SQL statements ALTER TABLE. So, in the application code, if the table name is provided by an untrusted upstream, it expose...

9.8CVSS0.00282EPSS
SaveExploits0References2
Rows per page
Query Builder