Skip to content
OpenAdvisories

Vendor

TabularisDB

2 known vulnerabilities.

Products

tabularis 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-118378 Public exploit

    Tabularis before 0.28.0 SQL Injection via MCP describe_table table_name

    Tabularis before 0.28.0 contains an SQL injection vulnerability in its SQLite driver that allows MCP clients to execute stacked statements by supplying a crafted table_name to the describe_table tool. Attackers, including AI agents steered by untrusted conten…

    TabularisDB tabularis