Astra Linux – Vulnerability in SQLite3

In SQlite 3.31.1, a potential null pointer derefrence was detected during the INTERSEC query processing...

Astra Linux – Vulnerability in SQLite3

In SQLite 3.30.1, the sqlite3Select function in select.c can cause a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usages...

Astra Linux – Vulnerability in SQLite3

SQLite version 3.31.1 allows attackers to cause a denial of service segmentation fault through a malformed window-function query, due to improper handling of the initialization of the AggInfo object...

onedrive_user_enum

onedriveuserenum v2.10 Gültige OneDrive-Benutzer enumerieren Eine vollständige Erläuterung der Enumerationstechnik und der OneDrive-Enumeration finden Sie im Blog hier: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ Wenn Sie nach der alten Version ohne Datenbank der OneDrive-Enumerati...

sqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array

Summary Using Databasecreateaggregate, createaggregatehandler, or Databasedefineaggregator to define an aggregate function that takes two or more arguments, and then evaluating it over TEXT or BLOB column values, can free the Ruby objects holding those arguments while a later argument is still...

GHSA-MWM8-39RW-8826 sqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array

Summary Using Databasecreateaggregate, createaggregatehandler, or Databasedefineaggregator to define an aggregate function that takes two or more arguments, and then evaluating it over TEXT or BLOB column values, can free the Ruby objects holding those arguments while a later argument is still...

PT-2026-111197

Summary Using Databasecreate aggregate, create aggregate handler, or Databasedefine aggregator to define an aggregate function that takes two or more arguments, and then evaluating it over TEXT or BLOB column values, can free the Ruby objects holding those arguments while a later argument is stil...

PT-2026-94344

Name of the Vulnerable Software and Affected Versions Vendure versions prior to 3.6.5 Description An unauthenticated Regular Expression Denial of Service ReDoS exists in the public Shop GraphQL API. The issue occurs when the StringOperators.regex filter is used, as the raw pattern is passed to a...

PT-2026-95046

Summary !IMPORTANT Only instances running on the SQLite driver better-sqlite3 are affected; SQLite is usually used in development/testing backend, so production deployments on PostgreSQL or MySQL/MariaDB are unaffected. The StringOperators.regex filter exposed on the public Shop GraphQL API is...

Astra Linux – Vulnerability in db5.3

SQLite3 versions from 3.6.0 through 3.27.2 are vulnerable to heap out-of-bound reads in the rtreenode function when handling invalid rtree tables...

Astra Linux – Vulnerability in SQLite3

SQLite 3.32.2 has a use-after-free issue in the resetAccumulator function in select.c, as the re-write of the parse tree for window functions occurs too late...

Astra Linux – Vulnerability in SQLite3

A vulnerability was discovered in SQLite SQLite3 version 3.43.0 and is classified as critical. This issue affects the sessionReadRecord function in the file ext/session/sqlite3session.c of the make alltest component. The vulnerability results in a heap-based buffer overflow. It is recommended to...

Astra Linux – Vulnerability in SQLite3

In SQLite 3.30.1, the exprListAppendList function in the window.c file allows attackers to trigger a invalid pointer dereferencing issue, as constant integer values in ORDER BY clauses of window definitions are handled incorrectly...

List of Security Fixes and Improvements in Veeam Plug-in for KubeVirt

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Plug-in for KubeVirt. This article aims to provide our customers' security and compliance teams with detailed information on security improvements between releases. Security...

CVE-2026-54687

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...

n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)

Affected versions 1.0.0 Patched version 1.0.0 Description In versions prior to 1.0.0, the SQLite node accepted the database file path as a direct node parameter visible and editable in the workflow. A workflow author who mapped untrusted user input to the dbpath field could allow an attacker to...

NPM: n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)

NPM: n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path dbpath parameter vulnerability discovered by ? in WordPress Npm n8n-nodes-sqlite3 versions 1.0.0...

GHSA-Q7M3-RHXG-7VXR n8n-nodes-sqlite3 vulnerable to path traversal via user-controlled database file path (db_path parameter)

Affected versions 1.0.0 Patched version 1.0.0 Description In versions prior to 1.0.0, the SQLite node accepted the database file path as a direct node parameter visible and editable in the workflow. A workflow author who mapped untrusted user input to the dbpath field could allow an attacker to...

CVE-2026-54687 n8n-nodes-sqlite3: Path traversal via user-controlled database file path (db_path parameter)

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...

CVE-2026-54687 n8n-nodes-sqlite3: Path traversal via user-controlled database file path (db_path parameter)

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the dbpath database file path as a node parameter that permits data expressions from upstream workflow input. A workflow author who maps untrusted input to dbpa...