cve.bz

CVE-2022-21227

7.5 highEPSS 2.2%

High (7.5) in ghost sqlite3. EPSS 2.2% chance of exploitation in the next 30 days. Fixed in sqlite3 5.0.3.

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service (DoS) which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine.

Severity

CVSS 3.1

7.5 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-9qrh-qjmc-5w2pnpmsqlite3>=5.0.0 <5.0.35.0.3

References

Check your stackJSON