npm/sqlite-vec CVE-2024-46488: critical 9.1, EPSS 0.44%
Heap-based Buffer Overflow in sqlite-vec
Action: Upgrade sqlite-vec to 0.1.3 or later.
npm i sqlite-vec@0.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.3 | - |
Fixed versions
| 0.1.3 |
Sources
- osv: GHSA-vrcx-gx3g-j3h8#npm/sqlite-vec
- https://nvd.nist.gov/vuln/detail/CVE-2024-46488
- https://github.com/VulnSphere/LLMVulnSphere/blob/main/VectorDB/sqlite-vec/OOBR_2.md
- https://github.com/advisories/GHSA-vrcx-gx3g-j3h8
- https://github.com/asg017/sqlite-vec
- https://github.com/asg017/sqlite-vec/releases/tag/v0.1.3
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sqlite-vec/CVE-2024-46488.yml
CVE-2024-46488 · published · modified · JSON