CVE-2026-51296

SQLite 3.41 has a use-after-free vulnerability in the JSON module’s jsonRemoveFunc. The parsed JSON object is freed at line 3555 while jsonLookupStep is called on the released pointer at line 3575, enabling remote attackers to crash the service and potentially leak heap memory information. Affect...