{"action":"Upgrade libsqlite3-sys to 0.25.1 or later.","affected":[{"fixed":"0.25.1","introduced":"0"}],"component":"libsqlite3-sys","cve_ids":["CVE-2022-35737"],"ecosystem":"crates.io","epss":0.23575,"exploited":false,"fixed_versions":["0.25.1"],"ghsa_id":"GHSA-jw36-hf63-69r9","id":"tcs_01M5KF1AHNVNB7FT2TXVAK5HPY","modified_at":"2024-03-27T18:33:45Z","published_at":"2022-08-04T00:00:26Z","references":["https://osv.dev/vulnerability/GHSA-jw36-hf63-69r9","https://nvd.nist.gov/vuln/detail/CVE-2022-35737","https://blog.trailofbits.com/2022/10/25/sqlite-vulnerability-july-2022-library-api","https://github.com/rusqlite/rusqlite","https://kb.cert.org/vuls/id/720344","https://rustsec.org/advisories/RUSTSEC-2022-0090.html","https://security.gentoo.org/glsa/202210-40","https://security.netapp.com/advisory/ntap-20220915-0009","https://sqlite.org/releaselog/3_39_2.html","https://www.sqlite.org/cves.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-jw36-hf63-69r9","url":"https://osv.dev/vulnerability/GHSA-jw36-hf63-69r9"}],"summary":"`libsqlite3-sys` via C SQLite improperly validates array index"}