{"action":"Upgrade sqlite to 3.28.0-r0 or later.","affected":[{"fixed":"3.28.0-r0","introduced":"3.6.0"}],"component":"sqlite","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.14","exploited":false,"fixed_versions":["3.28.0-r0"],"id":"tcs_01M5NBWW7TK6MVCBAZD04VG6YP","modified_at":"2026-09-21T06:17:52.548825528Z","published_at":"2019-05-30T16:29:01.840Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2019-8457","https://security.alpinelinux.org/vuln/CVE-2019-8457"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2019-8457#Alpine:v3.14/sqlite","url":"https://osv.dev/vulnerability/ALPINE-CVE-2019-8457"}],"summary":"SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables."}