Skip to content

tmp: image upload for TableProApp/TablePro#3972 - #11

Closed
J2TeamNNL wants to merge 70 commits into
mainfrom
feat/plugin-qdrant
Closed

J2TeamNNL wants to merge 70 commits into
mainfrom
feat/plugin-qdrant

Conversation

@J2TeamNNL

@J2TeamNNL J2TeamNNL commented Nov 1, 2026 •

Copy link
Copy Markdown
Owner

![before-picker-light before-picker-dark after-picker-light after-picker-dark after-form-light after-form-dark after-grid-light after-grid-dark after-editor-light after-editor-dark](./before-picker-light before-picker-dark after-picker-light after-picker-dark after-form-light after-form-dark after-grid-light after-grid-dark after-editor-light after-editor-dark.png)

before-picker-light

before-picker-dark

after-picker-light

after-picker-dark

after-form-light

after-form-dark

after-grid-light

after-grid-dark

after-editor-light

after-editor-dark

datlechin and others added 30 commits October 29, 2026 10:34
…ableProApp#3879)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…w Details (TableProApp#3881)

Co-authored-by: sedax90 <5001801+sedax90@users.noreply.github.com>
Co-authored-by: Ngo Quoc Dat <datlechin@gmail.com>
…olumn (TableProApp#3877)

Co-authored-by: sedax90 <5001801+sedax90@users.noreply.github.com>
Co-authored-by: Ngo Quoc Dat <datlechin@gmail.com>
…owngrade in every app (TableProApp#3878)

Co-authored-by: sedax90 <5001801+sedax90@users.noreply.github.com>
Co-authored-by: Ngo Quoc Dat <datlechin@gmail.com>
…eProApp#3880)

Co-authored-by: sedax90 <5001801+sedax90@users.noreply.github.com>
Co-authored-by: Ngo Quoc Dat <datlechin@gmail.com>
…3883)

Co-authored-by: sedax90 <5001801+sedax90@users.noreply.github.com>
Co-authored-by: Ngo Quoc Dat <datlechin@gmail.com>
…age as a picture in Row Details (TableProApp#3882)

Co-authored-by: sedax90 <5001801+sedax90@users.noreply.github.com>
Co-authored-by: Ngo Quoc Dat <datlechin@gmail.com>
…oApp#3901)

Co-authored-by: sedax90 <5001801+sedax90@users.noreply.github.com>
Co-authored-by: Ngo Quoc Dat <datlechin@gmail.com>
…bar (TableProApp#3896)

Co-authored-by: sedax90 <5001801+sedax90@users.noreply.github.com>
Co-authored-by: Ngo Quoc Dat <datlechin@gmail.com>
… the last column resize (TableProApp#3894)

Co-authored-by: sedax90 <5001801+sedax90@users.noreply.github.com>
Co-authored-by: Ngo Quoc Dat <datlechin@gmail.com>
…rver's databases (TableProApp#3900)

Co-authored-by: sedax90 <5001801+sedax90@users.noreply.github.com>
Co-authored-by: Ngo Quoc Dat <datlechin@gmail.com>
…s in the fonts they draw in (TableProApp#3895)

Co-authored-by: sedax90 <5001801+sedax90@users.noreply.github.com>
Co-authored-by: Ngo Quoc Dat <datlechin@gmail.com>
…tabase from the editor bar (TableProApp#3897)

Co-authored-by: sedax90 <5001801+sedax90@users.noreply.github.com>
Co-authored-by: Ngo Quoc Dat <datlechin@gmail.com>
sedax90 and others added 28 commits October 31, 2026 18:23
…e it in the window (TableProApp#3902)

Co-authored-by: sedax90 <5001801+sedax90@users.noreply.github.com>
Co-authored-by: Ngo Quoc Dat <datlechin@gmail.com>
…n session (TableProApp#3903)

Co-authored-by: sedax90 <5001801+sedax90@users.noreply.github.com>
Co-authored-by: Ngo Quoc Dat <datlechin@gmail.com>
…and when a failed connect is retried (TableProApp#3905)

Co-authored-by: sedax90 <5001801+sedax90@users.noreply.github.com>
Co-authored-by: Ngo Quoc Dat <datlechin@gmail.com>
* fix(security): pin PostgreSQL catalog reads to pg_catalog and SYS-qualify Oracle Explain

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CDER3MTT.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CRPAPF23.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-PEGM4H4N.
Advisory: GHSA-hgr8-24vm-5m54

* fix(security): write Oracle Estimated Plan to SYS.PLAN_TABLE$

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-PEGM4H4N.
Advisory: GHSA-hgr8-24vm-5m54

* test(security): expect the pg_catalog-qualified PostgreSQL cancel statement
* fix(security): harden the Git commands TablePro runs on its own

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-FRDSB33T.
Advisory: GHSA-rhxc-5m3h-r5ch

* fix(security): pin PostgreSQL catalog reads to pg_catalog and SYS-qualify Oracle Explain

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CDER3MTT.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CRPAPF23.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-PEGM4H4N.
Advisory: GHSA-hgr8-24vm-5m54

* fix(security): write Oracle Estimated Plan to SYS.PLAN_TABLE$

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-PEGM4H4N.
Advisory: GHSA-hgr8-24vm-5m54

* test(security): expect the pg_catalog-qualified PostgreSQL cancel statement
* fix(security): harden the Git commands TablePro runs on its own

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-FRDSB33T.
Advisory: GHSA-rhxc-5m3h-r5ch

* fix(security): pin PostgreSQL catalog reads to pg_catalog and SYS-qualify Oracle Explain

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CDER3MTT.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CRPAPF23.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-PEGM4H4N.
Advisory: GHSA-hgr8-24vm-5m54

* fix(security): harden dump tools, shell quoting and SSH host names

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-1D30XTRS.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-2L44V7CH.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-3NLPR9WG.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-AX94JCED.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-E9V7ZHHQ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-TWLM1VYZ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-U19XTGQC.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CF3R4T4R.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-BZJK0VNE.
Advisory: GHSA-94m6-qx4g-cpwg

* fix(security): write Oracle Estimated Plan to SYS.PLAN_TABLE$

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-PEGM4H4N.
Advisory: GHSA-hgr8-24vm-5m54

* fix(security): restore a DuckDB Parquet folder through a locked-down instance of its own

* test(security): expect the pg_catalog-qualified PostgreSQL cancel statement
* fix(security): harden the Git commands TablePro runs on its own

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-FRDSB33T.
Advisory: GHSA-rhxc-5m3h-r5ch

* fix(security): pin PostgreSQL catalog reads to pg_catalog and SYS-qualify Oracle Explain

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CDER3MTT.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CRPAPF23.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-PEGM4H4N.
Advisory: GHSA-hgr8-24vm-5m54

* fix(security): harden dump tools, shell quoting and SSH host names

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-1D30XTRS.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-2L44V7CH.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-3NLPR9WG.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-AX94JCED.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-E9V7ZHHQ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-TWLM1VYZ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-U19XTGQC.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CF3R4T4R.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-BZJK0VNE.
Advisory: GHSA-94m6-qx4g-cpwg

* fix(security): keep credentials on their own host and refuse TLS modes a driver cannot honour

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-EJ1059QD.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-L54ARVVX.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-R0FNK1XO.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-KSESNBFN.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-KGP1I8T0.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-11I9A28E.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-OP00LFZB.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-6ES8FYVM.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-60V4XYJM.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-YB76IHAI.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-9RQLLRZ0.
Advisory: GHSA-j2xw-m3p7-3m64

* fix(security): write Oracle Estimated Plan to SYS.PLAN_TABLE$

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-PEGM4H4N.
Advisory: GHSA-hgr8-24vm-5m54

* fix(security): restore a DuckDB Parquet folder through a locked-down instance of its own

* test(security): expect the pg_catalog-qualified PostgreSQL cancel statement
* fix(security): harden the Git commands TablePro runs on its own

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-FRDSB33T.
Advisory: GHSA-rhxc-5m3h-r5ch

* fix(security): pin PostgreSQL catalog reads to pg_catalog and SYS-qualify Oracle Explain

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CDER3MTT.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CRPAPF23.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-PEGM4H4N.
Advisory: GHSA-hgr8-24vm-5m54

* fix(security): harden dump tools, shell quoting and SSH host names

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-1D30XTRS.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-2L44V7CH.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-3NLPR9WG.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-AX94JCED.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-E9V7ZHHQ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-TWLM1VYZ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-U19XTGQC.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CF3R4T4R.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-BZJK0VNE.
Advisory: GHSA-94m6-qx4g-cpwg

* fix(security): keep credentials on their own host and refuse TLS modes a driver cannot honour

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-EJ1059QD.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-L54ARVVX.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-R0FNK1XO.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-KSESNBFN.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-KGP1I8T0.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-11I9A28E.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-OP00LFZB.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-6ES8FYVM.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-60V4XYJM.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-YB76IHAI.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-9RQLLRZ0.
Advisory: GHSA-j2xw-m3p7-3m64

* fix(security): escape quote characters by code unit in SQL quoters and escapers

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-MQSU9V64.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-ANTKKVJ8.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-TGUXS7JG.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-JXEUCZFY.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-RU2Q3CD4.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-LDFEMPI5.
Advisory: GHSA-58fh-9ghw-9qwv

* fix(security): write Oracle Estimated Plan to SYS.PLAN_TABLE$

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-PEGM4H4N.
Advisory: GHSA-hgr8-24vm-5m54

* fix(security): restore a DuckDB Parquet folder through a locked-down instance of its own

* test(security): expect the pg_catalog-qualified PostgreSQL cancel statement
* fix(security): harden the Git commands TablePro runs on its own

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-FRDSB33T.
Advisory: GHSA-rhxc-5m3h-r5ch

* fix(security): pin PostgreSQL catalog reads to pg_catalog and SYS-qualify Oracle Explain

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CDER3MTT.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CRPAPF23.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-PEGM4H4N.
Advisory: GHSA-hgr8-24vm-5m54

* fix(security): split external statements as the engine does and run them one at a time

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-0WQ6GN07.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-1KLNA54L.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-3CFSRVB9.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-5BPFIX62.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-5H2DRTGD.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-75OXA89M.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-76KHXTER.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-APRDPOPQ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-BFGN15RH.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-ELQB6JC2.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-FIK4MMTE.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-J1NQZAA4.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-NPWEHMEH.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-RWV5R6KH.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-T03WFSGH.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-T2IXRIQZ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-TBK6W4KL.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-TU0ACYJI.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-VKYFYDT1.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-WZ4W0W5V.
Advisory: GHSA-gg4q-84m8-8jhv

* docs(changelog): add the security fragments for GHSA-gg4q-84m8-8jhv

* fix(security): harden dump tools, shell quoting and SSH host names

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-1D30XTRS.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-2L44V7CH.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-3NLPR9WG.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-AX94JCED.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-E9V7ZHHQ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-TWLM1VYZ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-U19XTGQC.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CF3R4T4R.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-BZJK0VNE.
Advisory: GHSA-94m6-qx4g-cpwg

* fix(security): keep credentials on their own host and refuse TLS modes a driver cannot honour

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-EJ1059QD.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-L54ARVVX.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-R0FNK1XO.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-KSESNBFN.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-KGP1I8T0.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-11I9A28E.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-OP00LFZB.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-6ES8FYVM.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-60V4XYJM.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-YB76IHAI.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-9RQLLRZ0.
Advisory: GHSA-j2xw-m3p7-3m64

* fix(security): escape quote characters by code unit in SQL quoters and escapers

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-MQSU9V64.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-ANTKKVJ8.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-TGUXS7JG.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-JXEUCZFY.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-RU2Q3CD4.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-LDFEMPI5.
Advisory: GHSA-58fh-9ghw-9qwv

* chore(changelog): name the fragments after the advisory

* fix(security): write Oracle Estimated Plan to SYS.PLAN_TABLE$

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-PEGM4H4N.
Advisory: GHSA-hgr8-24vm-5m54

* fix(security): restore a DuckDB Parquet folder through a locked-down instance of its own

* test(security): expect the pg_catalog-qualified PostgreSQL cancel statement
* fix(security): harden the Git commands TablePro runs on its own

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-FRDSB33T.
Advisory: GHSA-rhxc-5m3h-r5ch

* fix(security): pin PostgreSQL catalog reads to pg_catalog and SYS-qualify Oracle Explain

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CDER3MTT.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CRPAPF23.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-PEGM4H4N.
Advisory: GHSA-hgr8-24vm-5m54

* fix(security): split external statements as the engine does and run them one at a time

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-0WQ6GN07.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-1KLNA54L.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-3CFSRVB9.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-5BPFIX62.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-5H2DRTGD.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-75OXA89M.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-76KHXTER.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-APRDPOPQ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-BFGN15RH.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-ELQB6JC2.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-FIK4MMTE.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-J1NQZAA4.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-NPWEHMEH.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-RWV5R6KH.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-T03WFSGH.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-T2IXRIQZ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-TBK6W4KL.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-TU0ACYJI.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-VKYFYDT1.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-WZ4W0W5V.
Advisory: GHSA-gg4q-84m8-8jhv

* docs(changelog): add the security fragments for GHSA-gg4q-84m8-8jhv

* fix(security): harden dump tools, shell quoting and SSH host names

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-1D30XTRS.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-2L44V7CH.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-3NLPR9WG.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-AX94JCED.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-E9V7ZHHQ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-TWLM1VYZ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-U19XTGQC.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CF3R4T4R.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-BZJK0VNE.
Advisory: GHSA-94m6-qx4g-cpwg

* fix(security): make drivers run only the statement the external gate read

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-8EK0ZEBM.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-PY2NB225.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-T9DK49U1.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-4FG5RLLG.
Advisory: GHSA-cr7m-37cv-h5p8

* fix(security): keep credentials on their own host and refuse TLS modes a driver cannot honour

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-EJ1059QD.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-L54ARVVX.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-R0FNK1XO.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-KSESNBFN.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-KGP1I8T0.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-11I9A28E.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-OP00LFZB.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-6ES8FYVM.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-60V4XYJM.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-YB76IHAI.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-9RQLLRZ0.
Advisory: GHSA-j2xw-m3p7-3m64

* fix(security): escape quote characters by code unit in SQL quoters and escapers

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-MQSU9V64.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-ANTKKVJ8.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-TGUXS7JG.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-JXEUCZFY.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-RU2Q3CD4.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-LDFEMPI5.
Advisory: GHSA-58fh-9ghw-9qwv

* chore(changelog): name the fragments after the advisory

* fix(security): write Oracle Estimated Plan to SYS.PLAN_TABLE$

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-PEGM4H4N.
Advisory: GHSA-hgr8-24vm-5m54

* fix(security): restore a DuckDB Parquet folder through a locked-down instance of its own

* chore(l10n): translate the grid-request refusal into French

* test(security): expect the pg_catalog-qualified PostgreSQL cancel statement
* fix(security): harden the Git commands TablePro runs on its own

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-FRDSB33T.
Advisory: GHSA-rhxc-5m3h-r5ch

* fix(security): pin PostgreSQL catalog reads to pg_catalog and SYS-qualify Oracle Explain

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CDER3MTT.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CRPAPF23.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-PEGM4H4N.
Advisory: GHSA-hgr8-24vm-5m54

* fix(security): split external statements as the engine does and run them one at a time

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-0WQ6GN07.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-1KLNA54L.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-3CFSRVB9.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-5BPFIX62.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-5H2DRTGD.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-75OXA89M.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-76KHXTER.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-APRDPOPQ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-BFGN15RH.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-ELQB6JC2.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-FIK4MMTE.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-J1NQZAA4.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-NPWEHMEH.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-RWV5R6KH.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-T03WFSGH.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-T2IXRIQZ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-TBK6W4KL.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-TU0ACYJI.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-VKYFYDT1.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-WZ4W0W5V.
Advisory: GHSA-gg4q-84m8-8jhv

* docs(changelog): add the security fragments for GHSA-gg4q-84m8-8jhv

* fix(security): harden dump tools, shell quoting and SSH host names

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-1D30XTRS.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-2L44V7CH.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-3NLPR9WG.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-AX94JCED.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-E9V7ZHHQ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-TWLM1VYZ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-U19XTGQC.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-CF3R4T4R.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-BZJK0VNE.
Advisory: GHSA-94m6-qx4g-cpwg

* fix(security): make drivers run only the statement the external gate read

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-8EK0ZEBM.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-PY2NB225.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-T9DK49U1.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-4FG5RLLG.
Advisory: GHSA-cr7m-37cv-h5p8

* fix(security): make the statement classifiers fail closed

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-5Y9KYO8P.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-DG30GWHK.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-FQF996V4.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-FU5VB1PP.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-FYRJNA7S.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-HEFECKSO.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-MC7TPCY4.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-SNCUNAXF.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-TQJOQUUH.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-UP6KX7ME.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-XF5T1EKX.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-2UHK7GIJ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-E10F4UFQ.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-H9C7Q0KW.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-QONLCCKC.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-Z2LIGRW4.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-WB2D42AD.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-TUTSEW23.
Advisory: GHSA-jj3q-3mpv-f853

* fix(security): keep credentials on their own host and refuse TLS modes a driver cannot honour

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-EJ1059QD.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-L54ARVVX.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-R0FNK1XO.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-KSESNBFN.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-KGP1I8T0.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-11I9A28E.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-OP00LFZB.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-6ES8FYVM.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-60V4XYJM.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-YB76IHAI.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-9RQLLRZ0.
Advisory: GHSA-j2xw-m3p7-3m64

* fix(security): escape quote characters by code unit in SQL quoters and escapers

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-MQSU9V64.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-ANTKKVJ8.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-TGUXS7JG.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-JXEUCZFY.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-RU2Q3CD4.
Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-LDFEMPI5.
Advisory: GHSA-58fh-9ghw-9qwv

* chore(changelog): name the fragments after the advisory

* fix(security): write Oracle Estimated Plan to SYS.PLAN_TABLE$

Discovered by Anthropic's OSS Scanner, as vulnerability ANT-2026-PEGM4H4N.
Advisory: GHSA-hgr8-24vm-5m54

* fix(security): restore a DuckDB Parquet folder through a locked-down instance of its own

* chore(l10n): translate the grid-request refusal into French

* test(security): expect the pg_catalog-qualified PostgreSQL cancel statement
…bases (TableProApp#3939)

Signed-off-by: Ngô Quốc Đạt <datlechin@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Ngo Quoc Dat <datlechin@gmail.com>
…abase (TableProApp#3958)

Co-authored-by: Ngo Quoc Dat <datlechin@gmail.com>
…'s key (TableProApp#3961)

Signed-off-by: Ngô Quốc Đạt <datlechin@gmail.com>
Co-authored-by: Ngo Quoc Dat <datlechin@gmail.com>
Co-authored-by: Ngo Quoc Dat <datlechin@gmail.com>
DatabaseTypeTests: allKnownTypes is 35 once StarRocks (main) and Qdrant (this branch) are both in it.
@J2TeamNNL

Copy link
Copy Markdown
Owner Author

Temporary draft used only to upload screenshots for TableProApp#3972. Closing.

@J2TeamNNL J2TeamNNL closed this Nov 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants