Threats tagged 'ghsa-qmv7-fcxw-pj9w'

A SQL injection vulnerability (CVE-2025-12397) was identified in Looker Studio affecting reports using BigQuery as the data source. A user with report view access could inject malicious SQL that executes with the report owner's permissions. The vulnerability was patched on 21 July 2025, and no customer action is required.