PyPI/cocoindex CVE-2026-28438: high, EPSS 0.29%
CocoIndex Doris target connector didn't verify table name when constructing ALTER TABLE statements
Action: Upgrade cocoindex to 0.3.34 or later.
pip install cocoindex==0.3.34Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.34 | - |
Fixed versions
| 0.3.34 |
Sources
- osv: GHSA-59g6-v3vg-f7wc
- https://github.com/cocoindex-io/cocoindex/security/advisories/GHSA-59g6-v3vg-f7wc
- https://nvd.nist.gov/vuln/detail/CVE-2026-28438
- https://github.com/cocoindex-io/cocoindex/commit/ba2fc4a89e22d35572c64bd2990737c7913b0729
- https://github.com/cocoindex-io/cocoindex
CVE-2026-28438 · published · modified · JSON