RubyGems/sqlite3: medium

sqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array

Action: Upgrade sqlite3 to 2.9.6 or later.

bundle update sqlite3

Affected

Fixed versions

Sources

• osv: GHSA-mwm8-39rw-8826
• https://github.com/sparklemotion/sqlite3-ruby/security/advisories/GHSA-mwm8-39rw-8826
• https://github.com/sparklemotion/sqlite3-ruby/pull/733
• https://github.com/sparklemotion/sqlite3-ruby/commit/cc5ac0cdf05af8148f4363410da0ba32508d9c97
• https://github.com/sparklemotion/sqlite3-ruby
• https://github.com/sparklemotion/sqlite3-ruby/releases/tag/v2.9.6

published 2026-10-02T23:11:51Z · modified 2026-10-02T23:30:05.927733793Z · JSON