CVE-2026-112915

A flaw was found in filelock. When utilizing the ReadWriteLock mechanism, the library attempts to open an SQLite database without properly restricting schema and query operations. A local attacker able to replace the lock database can provide a specially crafted file that causes lock acquisition ...

Linux Distros Unpatched Vulnerability : CVE-2026-112915

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock can open a crafted SQLite lock database without bounding schema...

Linux Distros Unpatched Vulnerability : CVE-2026-112936

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions from 3.20.4 resolve the lock pat...

DEBIAN-CVE-2026-112936

filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions from 3.20.4 resolve the lock path and pass it to SQLite without rejecting a final symbolic link, allowing another local user who can create names in the lock directory t...

bitwarden-cipher-create-acl

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · bitwarden-cipher-create-acl bitwarden-cipher-create-acl Bitwarden Server v2026.9.2 - Bitwarden Org cipher create on the Entity Framework path MariaDB, Postgres, SQLite drops the caller id before collection attach. A...

CVE-2026-112940

A flaw was found in filelock. When utilizing the ReadWriteLock mechanism, the component reopens SQLite database and auxiliary files by file path rather than retaining secure file descriptors. A local attacker with file renaming permissions in a shared directory can swap these filenames during...

sqlite-cli-recover

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-cli-recover sqlite-cli-recover Class: Command injection Reach: Local SQLite 3.53.4 b09c88c CLI .recover prints hostile sqliteschema.sql as a later dot-command. recoverOneStmt prepares only the first statement. ...

sqlite-wal-pagesize

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-wal-pagesize sqlite-wal-pagesize Class: Info leak Reach: Local SQLite 3.53.4 b09c88c still short-reads a WAL frame into a full pager page with no tail memset. walIndexRecover accepts any power-of-two WAL page...

sqlite-values-union

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-values-union sqlite-values-union Class: Crash Reach: Local SQLite 3.53.4 b09c88c - Hwaci Default VALUES uses a co-routine. WITH or schema reload, or a non-constant row forces sqlite3MultiValues onto UNION ALL...

sqlite-session-ncol

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-session-ncol sqlite-session-ncol Class: heap OOB write Reach: Local SQLite 3.53.4 b09c88c14082339b66c7b7158d609a771e64ca69, SOURCEID 2026-07-24 19:02:57...

sqlite-rtree-rowid0

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-rtree-rowid0 sqlite-rtree-rowid0 Class: UAF Reach: Local SQLite 3.53.4 b09c88c14082339b66c7b7158d609a771e64ca69, SOURCEID 2026-07-24 19:02:57 bf7c7f30031888f4e796e429ab3978879485813aaca6f641c7b33e4e09459bcc -...

sqlite-rsync-ssh

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · sqlite-rsync-ssh sqlite-rsync-ssh Class: RCE command injection Reach: Remote UI:R SQLite 3.53.4 b09c88c sqlite3rsync quotes USER@HOST:PATH for local /bin/sh -c. OpenSSH then space-joins the remote argv for the login...

CVE-2026-113666

ApostropheCMS is an open-source Node.js content management system. Prior to 1.1.0 of db-connect and 4.33.0 of ApostropheCMS, an account with view-draft access can submit a projection exclusion path that traverses through a constructor prototype chain to a shared prototype member when a consumer...

GHSA-J5RQ-XFVR-P969 ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service

Summary @apostrophecms/db-connect ships an in-memory MongoDB emulation used by its SQLite, PostgreSQL, and multipostgres adapters. Its unsetNestedField helper walks an attacker-controlled dotted field path with no segment validation and calls delete on the resolved property. A low-privileged...

ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service

Summary @apostrophecms/db-connect ships an in-memory MongoDB emulation used by its SQLite, PostgreSQL, and multipostgres adapters. Its unsetNestedField helper walks an attacker-controlled dotted field path with no segment validation and calls delete on the resolved property. A low-privileged...

CVE-2026-113666

The ApostropheCMS content management system is vulnerable to a denial of service via prototype pollution. Specifically, an authenticated account with view-draft access can submit a projection exclusion path that traverses the constructor prototype chain to delete a shared prototype member. This o...

CVE-2026-113666 ApostropheCMS: Authenticated projection-exclusion prototype-member deletion in @apostrophecms/db-connect causes process-wide denial of service

ApostropheCMS is an open-source Node.js content management system. Prior to 1.1.0 of db-connect and 4.33.0 of ApostropheCMS, an account with view-draft access can submit a projection exclusion path that traverses through a constructor prototype chain to a shared prototype member when a consumer...

CVE-2026-112936

filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions from 3.20.4 resolve the lock path and pass it to SQLite without rejecting a final symbolic link, allowing another local user who can create names in the lock directory t...

CVE-2026-112940

filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock let SQLite reopen the database and side files by name; on POSIX systems an attacker with rename access in a non-sticky parent can swap those names to cause overwrite or unlink operations, while a...

CVE-2026-112915

filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock can open a crafted SQLite lock database without bounding schema and query work, allowing another local user who can replace the database to make acquisition stall or hang; versions from 3.20.4 expose...