PT-2026-82684

Name of the Vulnerable Software and Affected Versions n8n-nodes-sqlite3 versions prior to 1.0.0 Description The nodes/SqliteNode/v1/SqliteV1.node.ts file exposes the db path parameter, which allows data expressions from upstream workflow input. If a workflow author maps untrusted input to this...

ROOT-OS-DEBIAN-12-CVE-2026-11824 CVE-2026-11824 in sqlite3 - Patched by Root

Root has patched CVE-2026-11824 in the sqlite3 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-11822 CVE-2026-11822 in sqlite3 - Patched by Root

Root has patched CVE-2026-11822 in the sqlite3 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-29088 CVE-2025-29088 in sqlite3 - Patched by Root

Root has patched CVE-2025-29088 in the sqlite3 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-7458 CVE-2025-7458 in sqlite3 - Patched by Root

Root has patched CVE-2025-7458 in the sqlite3 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-7709 CVE-2025-7709 in sqlite3 - Patched by Root

Root has patched CVE-2025-7709 in the sqlite3 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-11822 CVE-2026-11822 in sqlite3 - Patched by Root

Root has patched CVE-2026-11822 in the sqlite3 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-11824 CVE-2026-11824 in sqlite3 - Patched by Root

Root has patched CVE-2026-11824 in the sqlite3 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-6965 CVE-2025-6965 in sqlite3 - Patched by Root

Root has patched CVE-2025-6965 in the sqlite3 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2022-35737 CVE-2022-35737 in sqlite3 - Patched by Root

Root has patched CVE-2022-35737 in the sqlite3 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-11822 CVE-2026-11822 in sqlite3 - Patched by Root

Root has patched CVE-2026-11822 in the sqlite3 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-11824 CVE-2026-11824 in sqlite3 - Patched by Root

Root has patched CVE-2026-11824 in the sqlite3 package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2025-29088 CVE-2025-29088 in sqlite3 - Patched by Root

Root has patched CVE-2025-29088 in the sqlite3 package for Root:Debian:11. Multiple fixed versions available...

PT-2026-73399

A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSynccreateTagStore to continue executing a cached prepared statement after it has been reset and rebound with new parameters. SQLTagStore resets cached statements using sqlite3 reset directly, bypassing the...

PT-2026-73409

A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSynccreateTagStore to continue executing a cached prepared statement after it has been reset and rebound with new parameters. SQLTagStore resets cached statements using sqlite3 reset directly, bypassing the...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in rbsqlite3aggregatorstep in ext/sqlite3/aggregator.c. An attacker can make the aggregate step method receive a wrong or freed Ruby object, or crash the process, by invoking a multi-argument aggregate over...

SUSE CVE-2026-54619

sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, redefining a SQLite function with a different arity frees the previously registered function handler while SQLite may still reference it, resulting in a use-after-free. This issue is fixed in version...

CVE-2026-54619

A flaw was found in sqlite3-ruby. When a SQLite function is redefined with a different number of arguments arity, the previously registered function handler is prematurely freed. This can lead to a use-after-free vulnerability, where the program attempts to access memory that has already been...

MAL-2026-12513 Malicious code in async-mutex-lock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e195fef439eb6af3d28576857a30030e4bd839406fa36b2f939279743f12188e The package is advertised as a mutex-lock utility but ships none of the documented API no Mutex/lock/unlock. Its sole export, getPlugin in index.js,...

CVE-2026-54620

A flaw was found in sqlite3-ruby, a Ruby binding for the SQLite3 embedded database. This vulnerability occurs because callbacks used for SQLite aggregate functions can be prematurely freed while still being referenced during aggregation. A local attacker could potentially exploit this...