https://vulnogram.org/ Most recent CVEs assigned by ClickHouse, Inc. (clickhouse). https://vulnogram.org/seaview/icons/clickhouse.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2025-1386 https://vulnogram.org/CVE-2025-1386 When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such data to smuggle another query packet into the connection stream. Medium Fri, 11 Apr 2025 04:27:35 GMT https://vulnogram.org/CVE-2025-1385 https://vulnogram.org/CVE-2025-1385 When the library bridge feature is enabled, the clickhouse-library-bridge exposes an HTTP API on localhost. This allows clickhouse-server to dynamically load a library from a specified path and execute it in an isolated process. Combined with the Cli… High Thu, 20 Mar 2025 07:13:34 GMT https://vulnogram.org/CVE-2024-6873 https://vulnogram.org/CVE-2024-6873 It is possible to crash or redirect the execution flow of the ClickHouse server process from an unauthenticated vector by sending a specially crafted request to the ClickHouse server native interface. This redirection is limited to what is available… High Network Exploitable Thu, 01 Aug 2024 15:57:25 GMT