Threats affecting pkg:github/clickvisual

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-111670clickvisual · Missing Authorization Medium5.3EPSS 0.3%2026-10-16CVE Database V5CVE-2026-111670 ClickVisual through 1.1.2 contains a missing authorization vulnerability in the /api/v2/reports handlers that allows authenticated low-privileged users to access ClickHouse instances they were not granted. Attackers can iterate the instance-id parameter in ReportSourceDatabases, ReportSourceTables, ReportTableColumns and WhereCheckRun to enumerate schemas and infer row counts of restricted tables. EPSS 0.3%Vulnerability	CVE Database V5	2026-10-16

Page 1 of 1 · 1 duplicate CVE record merged