cve.bz

sparklemotion sqlite3-ruby vulnerabilities, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 4.8CVE-2026-128084

    sqlite3 provides Ruby bindings for the SQLite3 embedded database. Prior to 2.10.2, sqlite3-ruby casts Ruby string lengths to int before passing SQL through Database#prepare, bound String or Blob values through Statement#bind_param, and Str…

  2. 2.0CVE-2026-54620EPSS 0.1%

    sqlite3 provides Ruby bindings for the SQLite3 embedded database. From 2.1.0 to 2.9.4, the callbacks used for SQLite aggregate functions can be freed while still referenced during aggregation, resulting in a use-after-free. This issue is f…

  3. 2.0CVE-2026-54619EPSS 0.1%

    sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, redefining a SQLite function with a different arity frees the previously registered function handler while SQLite may still reference it, resul…