SQL Injection

Overview geopandas is a Geographic pandas extensions Affected versions of this package are vulnerable to SQL Injection in the topostgis function, which can be injected into via the geomname parameter to renamegeometry. An attacker can execute malicious SQL and retrieve the database server version...

PT-2025-38226

Name of the Vulnerable Software and Affected Versions CISA Thorium versions prior to 1.1.2 Description CISA Thorium does not adequately validate the paths of downloaded files via download ephemeral and download children. A remote, authenticated attacker could access arbitrary files subject to fil...