Search for packages
| purl | pkg:pypi/duckdb@0.9.3.dev6 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-dkjy-h9bw-7kgv | DuckDB <=0.9.2 and DuckDB extension-template <=0.9.2 are vulnerable to malicious extension injection via the custom extension feature. |
CVE-2024-22682
PYSEC-2024-25 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-02T04:20:44.569290+00:00 | Pypa Importer | Fixing | VCID-dkjy-h9bw-7kgv | https://github.com/pypa/advisory-database/blob/main/vulns/duckdb/PYSEC-2024-25.yaml | 38.6.0 |