{"action":"Upgrade lmdb to 0.98 or later.","affected":[{"fixed":"0.98","introduced":"0"}],"component":"lmdb","cve_ids":["CVE-2019-16224"],"ecosystem":"PyPI","epss":0.01815,"exploited":false,"fixed_versions":["0.98"],"ghsa_id":"GHSA-9q62-r72g-pvv7","id":"tcs_01M5KG94ZMENP53JRN2F98GKPN","modified_at":"2026-06-10T17:02:03.981108660Z","published_at":"2019-09-11T15:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-236","https://github.com/TeamSeri0us/pocs/tree/master/lmdb/lmdb%20initialization%20vuln","https://pypi.org/project/lmdb","https://nvd.nist.gov/vuln/detail/CVE-2019-16224","https://github.com/advisories/GHSA-9q62-r72g-pvv7"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-236","url":"https://osv.dev/vulnerability/PYSEC-2019-236"}],"summary":"An issue was discovered in py-lmdb 0.97. For certain values of md_flags, mdb_node_add does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs wh"}