A public PoC for a SQL injection flaw in Apache Superset versions before 6.0.0 could allow authenticated read-level users to trigger error-based SQL injection.
A public proof-of-concept (PoC) exploit has been released for CVE-2026-23980, a SQL injection vulnerability affecting Apache ...
PandasAI, an open source project by SinaptikAI, has been found vulnerable to Prompt Injection attacks. An attacker with access to the chat prompt can craft malicious input that is interpreted as code, ...