CVEs published by ClickHouse

CVEs published by ClickHouse (CVE Numbering Authority). 3 tracked.

CVE-2025-1386 MEDIUM 4.9 UPGRADE When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicio
CVE-2025-1385 HIGH 7.5 When the library bridge feature is enabled, the clickhouse-library-bridge exposes an HTTP API on localhost
CVE-2024-6873 HIGH 8.1 It is possible to crash or redirect the execution flow of the ClickHouse server process from an unauthenticate