Security Boulevard

Malicious PyPI Packages Deliver SilentSync RAT

IntroductionZscaler ThreatLabz regularly monitors for threats in the popular Python Package Index (PyPI), which contains open source libraries that are frequently used by many Python developers. In ...
GitHub

Potential performance issue with SQL parsing in jdbc-v2

Reporting against v.0.9.1. We are using ClickHouse JDBC via Hibernate - our code is calling createNativeQuery a lot - which means creating (and throwing away) a great number of PreparedStatements. As ...
IEEE

Database-Aware ASR Error Correction for Speech-to-SQL Parsing

Abstract: We study the task of spoken natural language to SQL parsing (speech-to-SQL), where the goal is to map a spoken utterance to the corresponding SQL. A simple way to develop a speech-to-SQL ...
GitHub

[Bug] Dangerous rm Command Execution with Unintended Path Parsing

I had claude working within my code repo. I asked it to clean the repo up. It tried to run a rm command with a bunch of folders.. ie rm /folder1/ /folder2/ c: /logs/ when I didn't catch that it had ...