DU
Product
duckdb
by duckdb · last CVE Oct 22, 2026
On CISA KEVExploited in the wild
3
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 1Medium 1Low 0
Watch

Add duckdb to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-41672
7.5
1%
Jul 24
DuckDB: sniff_csv provides filesystem access even when enable_external_access is disabled
Affected: <= 1.0.0
Showing 1