Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/03/16 4:34 p.m.•17 views

Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements

Summary The GHSA-x46r fix commit 39161f0 addressed SQL injection in the TimescaleDB export module by converting all SQL operations to use parameterized queries and psycopg.sql composable objects. However, the DuckDB export module glances/exports/glancesduckdb/init.py was not included in this fix...

9.1CVSS6.6AI score0.00403EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder