CVE-2026-84061

zhongyu09 OpenChatBI (versions up to v0.3.0) contains a remote SQL injection vulnerability in the _validate_sql_safety function within openchatbi/text2sql/generate_sql.py. Versions v0.2.0 through v0.2.2 lack SQL safety validation entirely; v0.3.0 introduced a validator, and v1.0.0b1/main retains ...