{"action":"Upgrade cocoindex to 0.3.34 or later.","affected":[{"fixed":"0.3.34","introduced":"0"}],"component":"cocoindex","cve_ids":["CVE-2026-28438"],"ecosystem":"PyPI","epss":0.00323,"exploited":false,"fixed_versions":["0.3.34"],"ghsa_id":"GHSA-59g6-v3vg-f7wc","id":"tcs_01M5KF0JDJGDW1P0NAR3PZEADD","modified_at":"2026-07-13T07:26:15.531359040Z","published_at":"2026-03-02T20:27:48Z","references":["https://osv.dev/vulnerability/GHSA-59g6-v3vg-f7wc","https://github.com/cocoindex-io/cocoindex/security/advisories/GHSA-59g6-v3vg-f7wc","https://nvd.nist.gov/vuln/detail/CVE-2026-28438","https://github.com/cocoindex-io/cocoindex/commit/ba2fc4a89e22d35572c64bd2990737c7913b0729","https://github.com/cocoindex-io/cocoindex"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-59g6-v3vg-f7wc","url":"https://osv.dev/vulnerability/GHSA-59g6-v3vg-f7wc"},{"source":"nvd","source_id":"CVE-2026-28438","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28438"}],"summary":"CocoIndex Doris target connector didn't verify table name when constructing ALTER TABLE statements"}