sql vulnerabilities

CVEs whose affected-version data names the sql package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-63393High· 8.7

1w ago

OpenSearch SQL plugin: Unsafe cursor deserialization permits server code execution

OpenSearch SQL supports querying OpenSearch data using SQL and Piped Processing Language. In the 2.x line from 2.8.0.0 until 2.19.6.0, and the 3.x line prior to 3.7.0.0, a remote authenticated user with basic read/search permissions can …

▾ Twilightopensearch-project · sqlEPSS 0.50%via CVEORG