Lucene search
K

6 matches found

EUVD
EUVD
added 2025/11/24 10:11 p.m.2 views

EUVD-2025-199098

Malicious code in @posthog/clickhouse npm...

6.6AI score
Exploits0References1
OSV
OSV
added 2025/11/24 10:11 p.m.3 views

MAL-2025-190945 Malicious code in @posthog/clickhouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67710c7cf24d338618be2ab087d4c3b27117879492e29334b31cd0328e171a The package @posthog/clickhouse was found to contain malicious code. Source: ghsa-malware...

6.8AI score
Exploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/24 10:11 p.m.4 views

Malicious code in @posthog/clickhouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67710c7cf24d338618be2ab087d4c3b27117879492e29334b31cd0328e171a The package @posthog/clickhouse was found to contain malicious code. Source: ghsa-malware...

6.9AI score
Exploits0References4
OSV
OSV
added 2025/04/23 5:16 p.m.3 views

CVE-2025-1520

PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PostHog. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

8CVSS8.4AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/04/23 4:45 p.m.5 views

CVE-2025-1520 PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability

PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PostHog. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.1CVSS8.4AI score0.00432EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/04/23 4:45 p.m.30 views

CVE-2025-1520 PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability

PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PostHog. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.1CVSS0.00432EPSS
Exploits0References2
Rows per page
Query Builder