Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-120067 | medium | 5.9 | No | For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for tables with OIDs, oid columns to the query. It copie... | 2026-11-02 |
| CVE-2026-120338 | critical | 10.0 | No | Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feat... | 2026-11-02 |
| CVE-2026-120308 | critical | 9.9 | No | A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path by joining the share... | 2026-11-02 |
| CVE-2026-120307 | critical | 9.9 | No | The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's container path into... | 2026-11-02 |
| CVE-2026-120306 | critical | 9.9 | No | Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on the build worker. The... | 2026-11-02 |
| CVE-2026-120066 | medium | 5.3 | No | On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by default, named from the program name, user name, an... | 2026-11-02 |
| CVE-2026-120065 | high | 7.1 | No | For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC uses that column to identify rows. It pla... | 2026-11-02 |
| CVE-2026-120064 | high | 7.5 | No | Several psqlODBC entry points use an application-supplied column number or row index as an array index without validating it. SQLBindCol wit... | 2026-11-02 |
| CVE-2026-120063 | medium | 5.9 | No | When psqlODBC quotes a schema or table name into a 128-byte stack buffer, its length check lets it write up to two bytes past the end of the... | 2026-11-02 |
| CVE-2026-120062 | high | 7.5 | No | SQLSpecialColumns in psqlODBC splices the table and schema names it receives into its catalog query without escaping them, while the other c... | 2026-11-02 |
| CVE-2026-120061 | high | 7.5 | No | The psqlODBC parser for ODBC escape sequences in application SQL text writes the argument offsets of a {fn} escape into a fixed 16-entry sta... | 2026-11-02 |
| CVE-2026-120060 | medium | 5.9 | No | psqlODBC trusts counts and lengths in server data in three places. SQLBulkOperations uses a server-supplied row count in a size subtraction... | 2026-11-02 |
| CVE-2026-120059 | medium | 6.8 | No | For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC places that column's name, as reported by... | 2026-11-02 |
| CVE-2026-120058 | high | 7.5 | No | psqlODBC sizes its row cache from the column count of a cursor's first result, but recomputes the column count from each later FETCH reply w... | 2026-11-02 |
| CVE-2026-120057 | high | 7.5 | No | psqlODBC copies the reply to a large-object read (loread) into the application's buffer using the length sent by the server, without compari... | 2026-11-02 |
| CVE-2026-119733 | high | 8.1 | No | Munshi (by Petpooja) before 2026-07-07 contained a missing authorization vulnerability in its company deletion workflow at DELETE /api/compa... | 2026-11-02 |
| CVE-2026-118871 | medium | 6.5 | No | SQL injection vulnerability classified as an internal threat level.Attackers can steal database information via SQL injection while logged i... | 2026-11-02 |
| CVE-2026-118276 | low | 3.5 | No | A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the function formatString of the file renderers... | 2026-11-02 |
| CVE-2026-118378 | high | 7.8 | No | Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute stacked statements b... | 2026-11-02 |
| CVE-2026-118374 | medium | 5.9 | No | LibreSSL ocspcheck through 4.4.0 contains a memory exhaustion vulnerability that allows malicious OCSP responders to exhaust memory by sendi... | 2026-11-02 |