Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Browse Security Advisories

Security Advisories for https://github.com/sqlite/sqlite Clear Filters

Critical
almost 4 years ago

An issue was found in fts5UnicodeTokenize() in ext/fts5/fts5_tokenize.c in Sqlite. A unicode61 tokenizer configured to treat unicode "control-characters" (class Cc), was treating embedded nul characters as tokens. The issue was fixed in sqlite-3.34.0 a... CPANSA-DBD-SQLite-2021-20223-sqlite

cpan DBD-SQLite
High
over 6 years ago

ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind. CPANSA-DBD-SQLite-2019-19959

cpan DBD-SQLite
High
over 6 years ago

selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error. CPANSA-DBD-SQLite-2019-20218

cpan DBD-SQLite
High
over 6 years ago

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results). CPANSA-DBD-SQLite-2019-19923

cpan DBD-SQLite
Moderate
over 6 years ago

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling. CPANSA-DBD-SQLite-2019-19924

cpan DBD-SQLite
High
over 6 years ago

zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive. CPANSA-DBD-SQLite-2019-19925

cpan DBD-SQLite
High
over 6 years ago

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880. CPANSA-DBD-SQLite-2019-19926

cpan DBD-SQLite
High
over 6 years ago

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled. CPANSA-DBD-SQLite-2019-19880

cpan DBD-SQLite
High
over 6 years ago

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash. CPANSA-DBD-SQLite-2019-19603

cpan DBD-SQLite
Moderate
over 6 years ago

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements. CPANSA-DBD-SQLite-2019-19645

cpan DBD-SQLite
Critical
over 6 years ago

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns. CPANSA-DBD-SQLite-2019-19646

cpan DBD-SQLite
Critical
over 6 years ago

lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact. CPANSA-DBD-SQLite-2019-19317

cpan DBD-SQLite
Moderate
over 6 years ago

SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c. CPANSA-DBD-SQLite-2019-19242-sqlite

cpan DBD-SQLite
Moderate
over 6 years ago

SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c. CPANSA-DBD-SQLite-2019-19242

cpan DBD-SQLite
High
over 6 years ago

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage. CPANSA-DBD-SQLite-2019-19244

cpan DBD-SQLite

Filter by Severity

Moderate 14,345 High 11,672 Critical 4,395 Low 2,376 Medium 45

Filter by Source

CPAN Security Advisory Database 890 Erlang Ecosystem Foundation 124 GitHub Advisory Database 33,213

Filter by Ecosystem

maven 7,804 npm 6,958 packagist 6,675 pypi 6,501 go 4,876 nuget 3,791 cargo 1,602 rubygems 1,069 cpan 889 hex 186 actions 57 swift 51 pub 10

Filter by Package

openclaw 591 moodle/moodle 437 tensorflow 433 tensorflow-cpu 406 tensorflow-gpu 398 magento/community-edition 323 org.jenkins-ci.main:jenkins-core 252 Microsoft.ChakraCore 247 github.com/mattermost/mattermost/server/v8 199 github.com/mattermost/mattermost-server 178 typo3/cms 166 magento/project-community-edition 155 com.liferay.portal:release.portal.bom 151 org.apache.tomcat:tomcat 149 wwbn/avideo 144 Magick.NET-Q16-AnyCPU 132 pimcore/pimcore 132 Magick.NET-Q16-HDRI-AnyCPU 131 apache-airflow 127 dolibarr/dolibarr 126 Magick.NET-Q16-HDRI-OpenMP-arm64 126 Magick.NET-Q16-HDRI-x86 124 Magick.NET-Q16-HDRI-x64 124 Magick.NET-Q16-HDRI-arm64 124 com.liferay.portal:release.dxp.bom 124 Magick.NET-Q16-arm64 121 Magick.NET-Q16-OpenMP-x64 121 Magick.NET-Q16-OpenMP-arm64 121 Magick.NET-Q16-x86 121 typo3/cms-core 121 Magick.NET-Q8-AnyCPU 121 concrete5/concrete5 119 Magick.NET-Q8-OpenMP-arm64 118 Magick.NET-Q16-x64 116 parse-server 116 craftcms/cms 116 Magick.NET-Q8-OpenMP-x64 114 Magick.NET-Q8-arm64 114 open-webui 112 Magick.NET-Q8-x86 111 Django 107 drupal/core 107 phpmyadmin/phpmyadmin 107 thorsten/phpmyfaq 105 microweber/microweber 105 Magick.NET-Q8-x64 103 n8n 100 librenms/librenms 100 org.keycloak:keycloak-services 96 Magick.NET-Q16-HDRI-OpenMP-x64 91 silverstripe/framework 90 symfony/symfony 88 flowise 86 mlflow 77 com.fasterxml.jackson.core:jackson-databind 76 gogs.io/gogs 75 github.com/usememos/memos 75 shopware/platform 74 drupal/drupal 73 getgrav/grav 69 salt 67 apache-superset 66 shopware/core 65 mantisbt/mantisbt 65 ansible 65 Magick.NET-Q16-OpenMP-x86 63 github.com/grafana/grafana 62 github.com/rancher/rancher 61 actionpack 59 picklescan 59 github.com/siyuan-note/siyuan/kernel 58 org.apache.struts:struts2-core 58 snipe/snipe-it 57 org.apache.tomcat.embed:tomcat-embed-core 57 baserproject/basercms 56 nokogiri 56 mautic/core 56 froxlor/froxlor 55 directus 55 next 55 vllm 54 nocodb 54 Plone 54 surrealdb 52 github.com/hashicorp/vault 52 admidio/admidio 50 org.keycloak:keycloak-core 50 rack 50 nova 49 django 49 gradio 48 pyload-ng 48 electron 47 getkirby/cms 47 org.xwiki.platform:xwiki-platform-oldcore 46 github.com/traefik/traefik/v2 45 perl 45 matrix-synapse 45 vyper 44 org.elasticsearch:elasticsearch 44 aiohttp 44 vm2 43 rdiffweb 43 k8s.io/kubernetes 42 nilsteampassnet/teampass 42 showdoc/showdoc 42 DBD-SQLite 42 code.gitea.io/gitea 42 github.com/traefik/traefik/v3 41 plone 41 intelliants/subrion 41 github.com/zitadel/zitadel 40 github.com/mattermost/mattermost-server/v6 40 phpmyfaq/phpmyfaq 40 hono 40 praisonai 39 io.undertow:undertow-core 39 keystone 39 wasmtime 39 net.mingsoft:ms-mcms 39 github.com/cilium/cilium 37 MT 37 PraisonAI 37 statamic/cms 37 org.apache.tomcat:tomcat-catalina 37 com.thoughtworks.xstream:xstream 37 ci4-cms-erp/ci4ms 36 github.com/filebrowser/filebrowser/v2 36 com.jfinal:jfinal 36 deno 36 github.com/argoproj/argo-cd/v2 36 DotNetNuke.Core 36 moin 35 github.com/answerdev/answer 34 pillow 34 github.com/hashicorp/nomad 34 shopware/shopware 34 org.jenkins-ci.plugins:script-security 34 praisonaiagents 33 code.vikunja.io/api 33 axios 33 pypdf 33 github.com/hashicorp/consul 32 langflow 32 github.com/docker/docker 32 zendframework/zendframework1 32 github.com/argoproj/argo-cd 32 opencv-contrib-python 31 org.apache.solr:solr-core 31 opencv-python 31 org.opencms:opencms-core 31 contao/core-bundle 31 prestashop/prestashop 31 yeswiki/yeswiki 31 pocketmine/pocketmine-mp 30 org.springframework.security:spring-security-core 30 undici 30 github.com/openbao/openbao 29 pnpm 28 Pillow 28 mediawiki/core 28 zebrad 27 github.com/fleetdm/fleet/v4 27 centreon/centreon 27 github.com/nats-io/nats-server/v2 27 @anthropic-ai/claude-code 27 dompurify 26 org.keycloak:keycloak-parent 26 cockpit-hq/cockpit 26 org.eclipse.jetty:jetty-server 26 golang.org/x/crypto 26 github.com/openfga/openfga 26 pgadmin4 26 funadmin/funadmin 26 github.com/ethereum/go-ethereum 26 github.com/coder/coder/v2 26 openmage/magento-lts 26 litellm 25 org.apache.openmeetings:openmeetings-parent 25 org.apache.tomcat:tomcat-coyote 25 grumpydictator/firefly-iii 25 laravel/framework 25 ghost 25 rubygems-update 25 openssl-src 25 openbabel 24 twig/twig 24 typo3/cms-backend 24 remdex/livehelperchat 23 phpoffice/phpexcel 23 org.xwiki.platform:xwiki-platform-web-templates 23 weblate 23 activerecord 23 simplesamlphp/simplesamlphp 23 Microsoft.AspNetCore.App.Runtime.win-x64 23 github.com/traefik/traefik 23 puppet 23 github.com/goharbor/harbor 23 Microsoft.AspNetCore.App.Runtime.win-arm 22 zendframework/zendframework 22

Filter by Repository

https://github.com/tensorflow/tensorflow 433 https://github.com/moodle/moodle 250 https://github.com/xwiki/xwiki-platform 222 https://github.com/chakra-core/ChakraCore 214 https://github.com/jenkinsci/jenkins 178 https://github.com/liferay/liferay-portal 170 https://github.com/django/django 121 https://github.com/jquery/jquery 118 https://github.com/apache/tomcat 118 https://github.com/pimcore/pimcore 116 https://github.com/apache/airflow 105 https://github.com/TYPO3/typo3 93 https://github.com/microweber/microweber 90 https://github.com/keycloak/keycloak 90 https://github.com/librenms/librenms 77 https://github.com/rails/rails 70 https://github.com/FasterXML/jackson-databind 70 https://github.com/thorsten/phpmyfaq 69 https://github.com/silverstripe/silverstripe-framework 68 https://github.com/usememos/memos 68 https://github.com/kubernetes/kubernetes 66 https://github.com/symfony/symfony 64 https://github.com/Dolibarr/dolibarr 60 https://github.com/mattermost/mattermost 59 https://github.com/ansible/ansible 59 https://github.com/python-pillow/Pillow 52 https://github.com/spring-projects/spring-framework 51 https://github.com/argoproj/argo-cd 50 https://github.com/apache/struts 47 https://github.com/grafana/grafana 47 https://github.com/mautic/mautic 46 https://github.com/rancher/rancher 46 https://github.com/phpmyadmin/phpmyadmin 45 https://github.com/concretecms/concretecms 44 https://github.com/vyperlang/vyper 44 https://github.com/shopware/platform 42 https://github.com/saltstack/salt 42 https://github.com/mantisbt/mantisbt 42 https://github.com/ikus060/rdiffweb 42 https://github.com/directus/directus 41 https://github.com/craftcms/cms 41 https://github.com/shopware/shopware 40 https://github.com/star7th/showdoc 39 https://github.com/mmaitre314/picklescan 39 https://github.com/dotnet/runtime 38 https://github.com/openstack/nova 38 https://github.com/magento/magento2 38 https://github.com/gradio-app/gradio 38 https://github.com/plone/Products.CMFPlone 37 https://github.com/x-stream/xstream 37 https://github.com/octobercms/october 36 https://github.com/mlflow/mlflow 36 https://github.com/umbraco/Umbraco-CMS 35 https://github.com/sparklemotion/nokogiri 35 https://github.com/apache/activemq 34 https://github.com/answerdev/answer 34 https://github.com/parse-community/parse-server 34 https://github.com/go-gitea/gitea 32 https://github.com/opencv/opencv 32 https://github.com/matrix-org/synapse 32 https://github.com/cilium/cilium 31 https://github.com/PaddlePaddle/Paddle 31 https://github.com/apache/inlong 31 https://github.com/contao/contao 30 https://github.com/snipe/snipe-it 30 https://github.com/erlang/otp 29 https://github.com/rack/rack 29 https://github.com/FlowiseAI/Flowise 28 https://github.com/electron/electron 28 https://github.com/CVEProject/cvelist 28 https://github.com/strapi/strapi 28 https://github.com/gogs/gogs 28 https://github.com/openstack/keystone 28 https://github.com/netty/netty 27 https://github.com/github/advisory-database 26 https://github.com/geoserver/geoserver 26 https://github.com/froxlor/froxlor 26 https://github.com/baserproject/basercms 26 https://github.com/apache/nifi 26 https://github.com/zitadel/zitadel 26 https://github.com/langchain-ai/langchain 25 https://github.com/pmmp/PocketMine-MP 25 https://github.com/bcgit/bc-java 25 https://github.com/vercel/next.js 25 https://github.com/traefik/traefik 25 https://github.com/surrealdb/surrealdb 25 https://github.com/denoland/deno 25 https://github.com/vllm-project/vllm 25 https://github.com/hashicorp/consul 24 https://github.com/run-llama/llama_index 24 https://github.com/pyload/pyload 24 https://github.com/getgrav/grav 24 https://github.com/apache/cxf 24 https://github.com/firefly-iii/firefly-iii 23 https://github.com/nilsteampassnet/TeamPass 23 https://github.com/bytecodealliance/wasmtime 23 https://github.com/moby/moby 23 https://github.com/livehelperchat/livehelperchat 23 https://github.com/eclipse/jetty.project 23 https://github.com/dnnsoftware/Dnn.Platform 23 https://github.com/TYPO3/TYPO3.CMS 23 https://github.com/PrestaShop/PrestaShop 23 https://github.com/PHPOffice/PhpSpreadsheet 22 https://github.com/jenkinsci/script-security-plugin 22 https://github.com/nervosnetwork/ckb 22 https://github.com/getkirby/kirby 22 https://github.com/Perl/perl5 22 https://github.com/helm/helm 22 https://github.com/goharbor/harbor 21 https://github.com/OpenZeppelin/openzeppelin-contracts 21 https://github.com/laravel/framework 21 https://github.com/undertow-io/undertow 21 https://github.com/hashicorp/vault 21 https://github.com/OpenNMS/opennms 20 https://github.com/jeecgboot/jeecg-boot 20 https://github.com/ethyca/fides 20 https://github.com/opencast/opencast 20 https://github.com/funadmin/funadmin 20 https://github.com/backstage/backstage 19 https://github.com/TYPO3-CMS/core 19 https://github.com/intelliants/subrion 19 https://github.com/containerd/containerd 19 https://github.com/nilsteampassnet/teampass 19 https://github.com/alkacon/opencms-core 19 https://github.com/cloudfoundry/uaa 19 https://github.com/simplesamlphp/simplesamlphp 19 https://github.com/huggingface/transformers 19 https://github.com/opencontainers/runc 18 https://github.com/OpenMage/magento-lts 18 https://github.com/vaadin/platform 18 https://github.com/rubygems/rubygems 18 https://github.com/apache/camel 18 https://github.com/liufee/cms 17 https://github.com/ethereum/go-ethereum 17 https://github.com/apache/kylin 17 https://github.com/vantage6/vantage6 17 https://github.com/mindsdb/mindsdb 17 https://github.com/openfga/openfga 17 https://github.com/dotnet/aspnetcore 16 https://github.com/rusqlite/rusqlite 16 https://github.com/pyca/cryptography 16 https://github.com/forkcms/forkcms 16 https://github.com/vitejs/vite 16 https://github.com/sequelize/sequelize 16 https://github.com/yetiforcecompany/yetiforcecrm 16 https://github.com/quarkusio/quarkus 16 https://github.com/tinymce/tinymce 16 https://github.com/twbs/bootstrap 16 https://github.com/etcd-io/etcd 16 https://github.com/hashicorp/nomad 16 https://github.com/drupal/core 15 https://github.com/decidim/decidim 15 https://github.com/ckeditor/ckeditor4 15 https://github.com/sqlite/sqlite 15 https://github.com/PHPMailer/PHPMailer 15 https://github.com/MobSF/Mobile-Security-Framework-MobSF 15 https://github.com/OPCFoundation/UA-.NETStandard 15 https://github.com/puppetlabs/puppet 15 https://github.com/zendframework/zendframework 15 https://github.com/cobbler/cobbler 15 https://github.com/spring-projects/spring-security 15 https://github.com/xuxueli/xxl-job 15 https://github.com/aio-libs/aiohttp 15 https://github.com/dompdf/dompdf 15 https://github.com/centreon/centreon 15 https://github.com/thorsten/phpMyFAQ 15 https://github.com/containers/podman 15 https://github.com/nodejs/undici 15 https://github.com/cockpit-hq/cockpit 14 https://github.com/golang/go 14 https://github.com/apache/zeppelin 14 https://github.com/twisted/twisted 14 https://github.com/cosmos/cosmos-sdk 14 https://github.com/publify/publify 14 https://github.com/pimcore/admin-ui-classic-bundle 14 https://github.com/TryGhost/Ghost 14 https://github.com/Graylog2/graylog2-server 14 https://github.com/ming-soft/MCMS 14 https://github.com/apache/superset 14 https://github.com/dpgaspar/Flask-AppBuilder 14 https://github.com/janeczku/calibre-web 14 https://github.com/ImageMagick/ImageMagick 14 https://github.com/pgadmin-org/pgadmin4 14 https://github.com/rails/rails-html-sanitizer 14 https://github.com/urllib3/urllib3 14 https://github.com/1Panel-dev/1Panel 13 https://github.com/apache/dolphinscheduler 13 https://github.com/zenml-io/zenml 13 https://github.com/OctoPrint/OctoPrint 13 https://github.com/modoboa/modoboa 13 https://sourceforge.net/projects/sourceforge.net 13 https://github.com/openbao/openbao 13 https://github.com/dromara/hutool 13 https://github.com/h2oai/h2o-3 13 https://github.com/OpenRefine/OpenRefine 13 https://github.com/laurent22/joplin 13 https://github.com/swagger-api/swagger-ui 13 https://sourceforge.net/projects/phpmyadmin.sourceforge.net 12 https://github.com/wagtail/wagtail 12