agentprime: dataease-sqlbotEvery new CVE for dataease-sqlbot.https://agentprime.io/CVE-2026-121453: SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpointhttps://agentprime.io/advisories/CVE-2026-121453/https://agentprime.io/advisories/CVE-2026-121453/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 15:17:02 GMTCVECVE-2026-93660: SQLBot through 1.10.1 Improper Access Control via Dashboard Updatehttps://agentprime.io/advisories/CVE-2026-93660/https://agentprime.io/advisories/CVE-2026-93660/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 14:23:22 GMTCVECVE-2026-53557: SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Executionhttps://agentprime.io/advisories/CVE-2026-53557/https://agentprime.io/advisories/CVE-2026-53557/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 21:41:45 GMTCVECVE-2026-53555: Stored XSS via SVG Uploadhttps://agentprime.io/advisories/CVE-2026-53555/https://agentprime.io/advisories/CVE-2026-53555/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 21:40:48 GMTCVECVE-2026-53556: SQLBot: Authenticated SQL Injection in previewData Resulting in Arbitrary File Readhttps://agentprime.io/advisories/CVE-2026-53556/https://agentprime.io/advisories/CVE-2026-53556/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 21:39:44 GMTCVECVE-2026-53554: SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import Processinghttps://agentprime.io/advisories/CVE-2026-53554/https://agentprime.io/advisories/CVE-2026-53554/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 21:38:37 GMTCVECVE-2026-72743: SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-htmlhttps://agentprime.io/advisories/CVE-2026-72743/https://agentprime.io/advisories/CVE-2026-72743/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:06:32 GMTCVECVE-2026-42463: SQLBot: Unauthorized Access Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-42463/https://agentprime.io/advisories/CVE-2026-42463/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 21:26:27 GMTCVECVE-2026-33324: SQLBot prompt injection allows arbitrary SQL execution and remote code executionhttps://agentprime.io/advisories/CVE-2026-33324/https://agentprime.io/advisories/CVE-2026-33324/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 May 2026 19:09:36 GMTCVEcriticalCVE-2026-5417: Dataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-5417/https://agentprime.io/advisories/CVE-2026-5417/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 18:15:11 GMTCVECVE-2026-32950: SQLBot: RCE via SQL Injection in Excel Upload Endpointhttps://agentprime.io/advisories/CVE-2026-32950/https://agentprime.io/advisories/CVE-2026-32950/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Mar 2026 04:14:45 GMTCVECVE-2026-32949: SQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQLhttps://agentprime.io/advisories/CVE-2026-32949/https://agentprime.io/advisories/CVE-2026-32949/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Mar 2026 04:08:43 GMTCVECVE-2026-32622: SQLBot: Remote Code Execution via Terminology Poisoninghttps://agentprime.io/advisories/CVE-2026-32622/https://agentprime.io/advisories/CVE-2026-32622/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Mar 2026 20:55:51 GMTCVECVE-2025-15598: Dataease SQLBot JWT Token auth.py validateEmbedded signature verificationhttps://agentprime.io/advisories/CVE-2025-15598/https://agentprime.io/advisories/CVE-2025-15598/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Mar 2026 09:32:06 GMTCVECVE-2025-15597: Dataease SQLBot API Endpoint assistant.py access controlhttps://agentprime.io/advisories/CVE-2025-15597/https://agentprime.io/advisories/CVE-2025-15597/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Mar 2026 06:16:35 GMTCVECVE-2025-69285: SQLBot uploadExcel Endpoint has Unauthenticated Arbitrary File Upload vulnerabilityhttps://agentprime.io/advisories/CVE-2025-69285/https://agentprime.io/advisories/CVE-2025-69285/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Jan 2026 20:05:22 GMTCVE