CVE-2026-104141

The open-source data visualization tool DataEase contains a SQL Injection vulnerability in its datasource metadata identifiers. Authenticated users with datasource access can provide crafted schema names, connection usernames, table names, or database names during metadata operations like getSche...