duckdb vulnerabilities
4 published CVEs name duckdb among the affected products.
- 4Published CVEs4 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-58139
DuckDB AWS Extension Security Policy Bypass via load_aws_credentials Procedure
duckdb · duckdb-aws
Medium6.0 - CVE-2025-64429
DuckDB Encryption Crypto implementation is vulnerable
duckdb · duckdb
Medium6.9 - CVE-2025-59037
DuckDB NPM packages 1.3.3 and 1.29.2 briefly compromised with malware
duckdb · duckdb-node
High8.6 - CVE-2024-41672
DuckDB: sniff_csv provides filesystem access even when enable_external_access is disabled
duckdb · duckdb
High7.5