Cpe:2.3:a:whodb:whodb:*:*:*:*:*:*:*:*

WhoDB versions prior to 0.135.0 are vulnerable to path traversal via DuckDB filesystem functions in the query editor, enabling remote unauthenticated file read and write access.