CLEANSTART-2026-SF72367 Security fix for CVE-2020-13434 applied in: sqlite 3.32.1-r0

Security vulnerability affects the sqlite package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JU58706 Security fix for CVE-2021-20227 applied in: sqlite 3.34.1-r0

Security vulnerability affects the sqlite package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102113

Security vulnerability affects the sqlite package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101650

Security vulnerability affects the sqlite package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102241

Security vulnerability affects the sqlite package. This issue is resolved in later releases. See references for vulnerability details...

EulerOS 2.0 SP10 : sqlite (EulerOS-SA-2026-3771)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process...

EulerOS Virtualization 2.12.1 : sqlite (EulerOS-SA-2026-3620)

According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause...

PT-2026-101921

Security vulnerability affects the sqlite package. This issue is resolved in later releases. See references for vulnerability details...

EulerOS 2.0 SP10 : sqlite (EulerOS-SA-2026-3724)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process...

PT-2026-100893

Security vulnerability affects the sqlite package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101703

Security vulnerability affects the sqlite package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-95718

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The application uses a calculator-style vault passcode to protect access, but the stored data is not bound to this authentication boundary. A local actor with...

PT-2026-101724

Security vulnerability affects the sqlite package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102084

Security vulnerability affects the sqlite package. This issue is resolved in later releases. See references for vulnerability details...

EulerOS Virtualization 2.11.0 : sqlite (EulerOS-SA-2026-3561)

According to the versions of the sqlite packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3dbconfig in the C-language API can cause a denial of service...

EulerOS Virtualization 2.11.1 : sqlite (EulerOS-SA-2026-3474)

According to the versions of the sqlite packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3dbconfig in the C-language API can cause a denial of service...

EulerOS Virtualization 2.12.0 : sqlite (EulerOS-SA-2026-3674)

According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause...

GHSA-JGM3-QMP2-C4P7 Vendure: Unauthenticated ReDoS via `regex` filter on SQLite backends

Summary !IMPORTANT Only instances running on the SQLite driver better-sqlite3 are affected; SQLite is usually used in development/testing backend, so production deployments on PostgreSQL or MySQL/MariaDB are unaffected. The StringOperators.regex filter exposed on the public Shop GraphQL API is...

Vendure: Unauthenticated ReDoS via `regex` filter on SQLite backends

Summary !IMPORTANT Only instances running on the SQLite driver better-sqlite3 are affected; SQLite is usually used in development/testing backend, so production deployments on PostgreSQL or MySQL/MariaDB are unaffected. The StringOperators.regex filter exposed on the public Shop GraphQL API is...

CVE-2026-63460

Vendure , an open-source headless commerce platform, is vulnerable to an unauthenticated Regular Expression Denial of Service (ReDoS) prior to version 3.6.5 . The public Shop GraphQL API exposes StringOperators.regex, which passes a user-supplied pattern to a synchronous JavaScript UDF registered...