bigquery-fdw (>=2.1.1, <=2.1.2), bxsolana-trader (1.7.0) +6 more potentially affected by CVE-2026-0994 via protobuf (4.21.8)

protobuf PYPI version 4.21.8 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bigquery-fdw =2.1.1, =0.0.13, =0.2.0, =0.0.2, =0.4.0, =0.2.0, =0.1.0, =0.1.1 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

bigquery-fdw (>=2.1.1, <=2.1.2), bxsolana-trader (1.7.0) +6 more potentially affected by CVE-2026-0994 via protobuf (4.21.8)

protobuf PYPI version 4.21.8 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bigquery-fdw =2.1.1, =0.0.13, =0.2.0, =0.0.2, =0.4.0, =0.2.0, =0.1.0, =0.1.1 Source cves: CVE-2026-0994 Source advisory: OSV:GHSA-7GCM-G887-7QV...

CVE-2022-24854

Summary of CVE-2022-24854 (Metabase) : Metabase uses SQLite with an FDW-like feature called ATTACH DATABASE. If an attacker has SQL permissions on at least one SQLite database, they can attach that database to a second one and query across all attached tables. Exploitation requires knowledge of t...