Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/16 4:34 p.m.13 views

GHSA-49G7-2WW7-3VF5 Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements

Summary The GHSA-x46r fix commit 39161f0 addressed SQL injection in the TimescaleDB export module by converting all SQL operations to use parameterized queries and psycopg.sql composable objects. However, the DuckDB export module glances/exports/glancesduckdb/init.py was not included in this fix...

7CVSS5.9AI score0.00325EPSS
SaveExploits1References5
Rows per page
Query Builder