CVE-2026-72881: Improper Neutralization of Special Elements used in an OS Command

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, database backup and restore command builders in packages/server/src/utils/backups/utils.ts and packages/server/src/utils/restore/utils.ts interpolate database names, usernames, and passwords into nested shell command...

Malicious code in @mastra/libsql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbbf064d557b14369949349954c599a26dda8f1d99e99bc5528c4b94e99bffb The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in awaitly-libsql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b990b0b3ddf0eb2fbfe64fc70090459960085e3268df5cbdd1a86f958f69448e No concrete installer-harm signals were identified in this package version. The package name combines 'awaitly' and 'libsql' a well-known SQLite-fork...

MAL-2026-5236 Malicious code in awaitly-libsql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b990b0b3ddf0eb2fbfe64fc70090459960085e3268df5cbdd1a86f958f69448e No concrete installer-harm signals were identified in this package version. The package name combines 'awaitly' and 'libsql' a well-known SQLite-fork...

EUVD-2025-14089

Malicious code in bioql PyPI...

CVE-2025-47736

dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8...

GHSA-8M95-FFFC-H4C5 libsql-sqlite3-parser crash due to invalid UTF-8 input

dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8...

libsql-sqlite3-parser crash due to invalid UTF-8 input

dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8...

CVE-2025-47736

dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8...

CVE-2025-47736

The CVE-2025-47736 issue affects the libsql-sqlite3-parser crate (Rust). Specifically, the dialect/mod.rs component can crash when given input that is not valid UTF-8, affecting versions up to 0.13.0 and before the commit 14f422a. The vulnerability arises from handling non-UTF-8 input during pars...

CVE-2025-47736

dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8...

PT-2025-20471 · Unknown · Libsql-Sqlite3-Parser

Name of the Vulnerable Software and Affected Versions: libsql-sqlite3-parser versions 0.13.0 and earlier Description: The issue is related to the dialect/mod.rs file in the libsql-sqlite3-parser crate for Rust, which can crash if the input is not valid UTF-8. Recommendations: For versions 0.13.0...

libSQL 安全漏洞

libSQL is a branch of SQLite open-sourced by Turso Database. A security vulnerability exists in libSQL version 0.13.0, which stems from a potential crash when entering a non-valid UTF-8...

CVE-2025-47736

dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8...

leptos-spin-macro (0.1.0), leptos_reactive (>=0.5.5, <=0.7.0-preview2) +1 more potentially affected by CVE-2024-32980 via spin-sdk (2.2.0)

spin-sdk CARGO version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on spin-sdk and may be impacted: - leptos-spin-macro 0.1.0 - leptosreactive =0.5.5, =0.7.0-preview2 - libsql-client 0.33.3 Source cves: CVE-2024-32980 Source advisory:...