Products: 1
    Vulnerabilities: 5
    Known Exploited: 0
    0
    Critical Level Threats
    2
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-58139

    DuckDB AWS Extension Security Policy Bypass via load_aws_credentials Procedure

    Last Modified: Aug 14, 2026
    Published: Aug 03, 2026

    CVE-2025-64429

    DuckDB Encryption Crypto implementation is vulnerable

    Last Modified: Nov 25, 2025
    Published: Nov 12, 2025

    CVE-2025-59037

    DuckDB NPM packages 1.3.3 and 1.29.2 briefly compromised with malware

    Last Modified: Apr 15, 2026
    Published: Sep 09, 2025

    CVE-2024-8099

    Server-Side Request Forgery (SSRF) in vanna-ai/vanna

    Last Modified: Apr 15, 2026
    Published: Mar 20, 2025

    CVE-2024-41672

    DuckDB: sniff_csv provides filesystem access even when enable_external_access is disabled

    Last Modified: Nov 21, 2024
    Published: Jul 24, 2024
    Items Per Page
    Duckdb Vulnerabilities & Security CVEs | CVE-DB