{"action":"Upgrade sqlite3 to 5.0.3 or later.","affected":[{"fixed":"5.0.3","introduced":"5.0.0"}],"component":"sqlite3","cve_ids":["CVE-2022-21227"],"ecosystem":"npm","epss":0.02213,"exploited":false,"fixed_versions":["5.0.3"],"ghsa_id":"GHSA-9qrh-qjmc-5w2p","id":"tcs_01M5KFGR3B59RF1RR60FNGD0ZV","modified_at":"2025-01-14T10:26:57.660006Z","published_at":"2022-04-28T20:25:23Z","references":["https://osv.dev/vulnerability/GHSA-9qrh-qjmc-5w2p","https://github.com/TryGhost/node-sqlite3/security/advisories/GHSA-9qrh-qjmc-5w2p","https://nvd.nist.gov/vuln/detail/CVE-2022-21227","https://github.com/TryGhost/node-sqlite3/issues/1440","https://github.com/TryGhost/node-sqlite3/issues/1449","https://github.com/TryGhost/node-sqlite3/commit/593c9d498be2510d286349134537e3bf89401c4a","https://github.com/TryGhost/node-sqlite3","https://security.snyk.io/vuln/SNYK-JS-SQLITE3-2388645","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2805470","https://snyk.io/vuln/SNYK-JS-SQLITE3-2388645"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-9qrh-qjmc-5w2p","url":"https://osv.dev/vulnerability/GHSA-9qrh-qjmc-5w2p"}],"summary":"Denial-of-Service when binding invalid parameters in sqlite3"}