Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/cocoindex@0.3.34
purl pkg:pypi/cocoindex@0.3.34
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-4uba-rh4b-kqaq CocoIndex is a data transformation framework for AI. Prior to version 0.3.34, the Doris target connector didn't verify the configured table name before creating some SQL statements (ALTER TABLE). So, in the application code, if the table name is provided by an untrusted upstream, it expose vulnerability to SQL injection when target schema change. This issue has been patched in version 0.3.34. CVE-2026-28438
GHSA-59g6-v3vg-f7wc

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T15:50:57.131096+00:00 GitLab Importer Fixing VCID-4uba-rh4b-kqaq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/cocoindex/CVE-2026-28438.yml 38.6.0
2026-06-12T07:49:13.471580+00:00 GithubOSV Importer Fixing VCID-4uba-rh4b-kqaq https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-59g6-v3vg-f7wc/GHSA-59g6-v3vg-f7wc.json 38.6.0
2026-06-11T20:38:25.149325+00:00 GHSA Importer Fixing VCID-4uba-rh4b-kqaq https://github.com/advisories/GHSA-59g6-v3vg-f7wc 38.6.0