The vulnerabilities of the node-api, node-bindings, and duckdb-wasm packages of the DuckDB relational database management system allow attackers to gain unauthorized access to protected information.

The vulnerability of the node-api, node-bindings, and duckdb-wasm packages in the DuckDB database management system is related to the presence of undeclared capabilities. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...