Vulnerabilities in duckdb

3 results
CVE-2024-41672HIGHDuckDB: sniff_csv provides filesystem access even when enable_external_access is disabledEPSS 0.8%CVE-2025-59037HIGHDuckDB NPM packages 1.3.3 and 1.29.2 briefly compromised with malwareEPSS 0.3%CVE-2025-64429MEDIUMDuckDB Encryption Crypto implementation is vulnerableEPSS 0.1%