CVE-2025-64429
1 advisory.
PyPI/duckdb CVE-2025-64429: medium 6.5
DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The Duc
Action: Upgrade duckdb to 1.4.2 or later.
pip install duckdb==1.4.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.0 | 1.4.2 | - |
Fixed versions
| 1.4.2 |
Sources
- osv: PYSEC-2025-112
- https://github.com/duckdb/duckdb/blob/029a5b87ff5b1cd22f7f9717d48cd8830d00807c/src/common/random_engine.cpp#L20
- https://duckdb.org/2025/09/16/announcing-duckdb-140.html
- https://github.com/duckdb/duckdb/security/advisories/GHSA-vmp8-hg63-v2hp
- https://github.com/duckdb/duckdb/pull/17275
CVE-2025-64429 · published · modified · JSON