Skip to content
OpenAdvisories

Vendor

DataRecce

1 known vulnerabilities.

Products

recce 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-49360

    Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB

    Recce is a data-validation toolkit for enhanced dbt (data build tool) PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the …

    DataRecce recce recce PyPI