Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/16 4:34 p.m.9 views

Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements

Summary The GHSA-x46r fix commit 39161f0 addressed SQL injection in the TimescaleDB export module by converting all SQL operations to use parameterized queries and psycopg.sql composable objects. However, the DuckDB export module glances/exports/glancesduckdb/init.py was not included in this fix...

9.1CVSS5.9AI score0.00325EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder