{"action":"Upgrade lmdb to 0.98 or later.","affected":[{"fixed":"0.98","introduced":"0"}],"component":"lmdb","cve_ids":["CVE-2019-16225"],"ecosystem":"PyPI","epss":0.01815,"exploited":false,"fixed_versions":["0.98"],"ghsa_id":"GHSA-c74c-p4p7-r8q5","id":"tcs_01M5KG9542CRM3PVFN3W82GRRB","modified_at":"2026-06-10T17:02:01.585860364Z","published_at":"2019-09-11T15:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-237","https://github.com/TeamSeri0us/pocs/tree/master/lmdb/lmdb%20write%20to%20illegal%20address","https://pypi.org/project/lmdb","https://nvd.nist.gov/vuln/detail/CVE-2019-16225","https://github.com/advisories/GHSA-c74c-p4p7-r8q5"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-237","url":"https://osv.dev/vulnerability/PYSEC-2019-237"}],"summary":"An issue was discovered in py-lmdb 0.97. For certain values of mp_flags, mdb_page_touch does not properly set up mc->mc_pg[mc->top], leading to an invalid write operation. NOTE: this outcome occurs wh"}