Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Query smuggling in ch-go library
Vulnerability Description
When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such data to smuggle another query packet into the connection stream.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ClickHouse 安全漏洞
Vulnerability Description
ClickHouse是ClickHouse开源的一个用于实时应用程序和分析的速度最快、资源效率最高的开源数据库。 ClickHouse存在安全漏洞,该漏洞源于查询包含大型未压缩恶意外部数据时,攻击者可向连接流中注入另一个查询包。
CVSS Information
N/A
Vulnerability Type
N/A