VYPR

clickhouse

by Hypequery

CVEs (1)

  • CVE-2026-54658Jul 28, 2026
    risk 0.00cvss epss 0.00

    Hypequery is a TypeScript semantic layer for ClickHouse. Prior to 2.5.1, escapeValue() in packages/clickhouse/src/core/utils.ts did not escape backslashes before single quotes during parameter substitution, allowing attacker controlled query parameters with a trailing backslash…