Vulnerability Database - OSV

GHSA-6wcc-39rp-hh9p

npm/@hypequery/clickhouse

@hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution 28 Jul

Fix available
Severity - 9.8 (Critical)

CVE-2026-54658

github.com/hypequery/hypequery

@hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution 28 Jul

Fix available
Severity - 9.8 (Critical)