Read the docs

ClickHouse

Records29All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

ClickHouse records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Ch · all components

TI-2025-01190 CVE-2025-1386 · GHSA-m454-3xv7-qj85

Query smuggling in ch-go library

Priority LOW 27

When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such data to smuggle another query packet into…

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.00401 Published 2025-04-11 Fixed in 0.65.0 CWE-444
Open these records in search →