{"action":"Upgrade sqlite3 to 2.9.6 or later.","affected":[{"fixed":"2.9.6","introduced":"1.4.0"}],"component":"sqlite3","cve_ids":[],"ecosystem":"RubyGems","exploited":false,"fixed_versions":["2.9.6"],"ghsa_id":"GHSA-mwm8-39rw-8826","id":"tcs_01M5KEMBZ3TBJGDYHHXNH3VC93","modified_at":"2026-10-02T23:30:05.927733793Z","published_at":"2026-10-02T23:11:51Z","references":["https://osv.dev/vulnerability/GHSA-mwm8-39rw-8826","https://github.com/sparklemotion/sqlite3-ruby/security/advisories/GHSA-mwm8-39rw-8826","https://github.com/sparklemotion/sqlite3-ruby/pull/733","https://github.com/sparklemotion/sqlite3-ruby/commit/cc5ac0cdf05af8148f4363410da0ba32508d9c97","https://github.com/sparklemotion/sqlite3-ruby","https://github.com/sparklemotion/sqlite3-ruby/releases/tag/v2.9.6"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-mwm8-39rw-8826","url":"https://osv.dev/vulnerability/GHSA-mwm8-39rw-8826"}],"summary":"sqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array"}