Results of 1 - 3 of about 3 for malicious (0.001 sec.)
- Securing Extensions 11384
- DuckDB has a powerful extension mechanism, which has the same privileges as the user running DuckDB's (parent) process. This introduces security considerations. Therefore, we recommend reviewing the configuration options listed on this page
...d npm that allow uploading arbitrary binaries but a step down from reviewing everything manually. We allow users to report malicious extensions and show adoption statistics like GitHub stars and download count. Because we manage the repository, we can rem...the community extension repository will execute code written by third party developers, and therefore can be dangerous. A malicious developer could create and register a harmless-looking DuckDB extension that steals your crypto coins. If you're running a...extension development, enabling it will allow DuckDB to load any extensions, which means more care must be taken to ensure malicious extensions are not loaded.... - https://man.mtool.work/duckdb/2.0/operations_manual/securing_duckdb/securing_ext...
- Embedding DuckDB 9617
- CLI Client The Command Line Interface (CLI) client is intended for interactive use cases and not for embedding. As a result, it has more features that could be abused by a malicious actor. For example, the CLI client has the .sh feature tha
... - https://man.mtool.work/duckdb/2.0/operations_manual/securing_duckdb/embedding_du...
- Securing DuckDB 6864
- DuckDB is a powerful analytical database engine. It can read and write files, access the network, load extensions, and use system resources. Like any powerful tool, these capabilities require appropriate configuration when working with sens
...t sandboxing should not just be considered for security purposes, but also for preventing denial of service (DoS) attacks: malicious inputs can easily cause DuckDB to consume excessive resources such as memory, disk, CPU, or network. Untrusted Non-SQL Inp... - https://man.mtool.work/duckdb/2.0/operations_manual/securing_duckdb/overview.htm...
PREV
1
NEXT
DuckDB 2.0 Documentation / man.mtool.work