CVE-2022-21227
1 advisory.
npm/sqlite3 CVE-2022-21227: high 7.5, EPSS 2.21%
Denial-of-Service when binding invalid parameters in sqlite3
Action: Upgrade sqlite3 to 5.0.3 or later.
npm i sqlite3@5.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.3 | - |
Fixed versions
| 5.0.3 |
Sources
- osv: GHSA-9qrh-qjmc-5w2p
- https://github.com/TryGhost/node-sqlite3/security/advisories/GHSA-9qrh-qjmc-5w2p
- https://nvd.nist.gov/vuln/detail/CVE-2022-21227
- https://github.com/TryGhost/node-sqlite3/issues/1440
- https://github.com/TryGhost/node-sqlite3/issues/1449
- https://github.com/TryGhost/node-sqlite3/commit/593c9d498be2510d286349134537e3bf89401c4a
- https://github.com/TryGhost/node-sqlite3
- https://security.snyk.io/vuln/SNYK-JS-SQLITE3-2388645
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2805470
- https://snyk.io/vuln/SNYK-JS-SQLITE3-2388645
CVE-2022-21227 · published · modified · JSON