Skip to content
OpenAdvisories

Vendor

zhongyu09

3 known vulnerabilities.

Products

openchatbi 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-84061

    zhongyu09 OpenChatBI generate_sql.py _validate_sql_safety sql injection

    A security flaw has been discovered in zhongyu09 OpenChatBI up to 0.3.0. Affected by this vulnerability is the function _validate_sql_safety of the file openchatbi/text2sql/generate_sql.py. Performing a manipulation results in sql injection. The attack can be…

    zhongyu09 openchatbi
  • Medium 6.3
    CVE-2026-5586

    zhongyu09 openchatbi Multi-stage Text2SQL Workflow sql injection

    A vulnerability was determined in zhongyu09 openchatbi up to 0.2.1. The impacted element is an unknown function of the component Multi-stage Text2SQL Workflow. Executing a manipulation of the argument keywords can lead to sql injection. The attack may be laun…

    zhongyu09 openchatbi