AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

DuckDB security advisories

3 advisories · none critical or high in 12 months · latest Nov 12, 2025

Repository

3 advisories

Medium 6.5Nov 12, 2025DuckDB: DuckDB implemented block-based encryption of DB on the filesystem...CVE-2025-64429fixed in 1.4.2High 7.5Jan 21, 2025sniff_csv provides filesystem access even when enable_external_access is disabled in duckdbCVE-2024-41672fixed in 1.1.0Critical 9.8Jan 30, 2024DuckDB <=0.9.2 and DuckDB extension-template <=0.9.2 are vulnerable to...CVE-2024-22682fixed in 0.9.3.dev6
About DuckDB

The in-process analytical database.

Packages watched: duckdb (PyPI).

duckdb/duckdbOn ReposDuckDB

DuckDB elsewhere on Ibis: Paydays · Releases