Skip to content
OpenAdvisories

Package · PyPI

recce

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.8
    CVE-2026-49360

    Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB

    Recce is a data-validation toolkit for enhanced dbt (data build tool) PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the …

    DataRecce recce recce PyPI