clidey CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL clidey CVE published 2026-10-18

CVE-2026-112005

CVE-2026-112005 debrief based on the supplied source corpus. The vulnerability allows remote attackers to read and write arbitrary host files through DuckDB filesystem functions in the query editor for WhoDB versions between 0.104.0 and 0.135.0. Defenders should assess exposure and potential impact, and apply patches or updates to prevent exploitation. The vulnerability has a critical CVSS score of 9.2 an [truncated]