Filelock ReadWriteLock: A Crafted Lock Database Makes Every Acquire Stall Or Hang Regardless Of Timeout

"ReadWriteLock" and "AsyncReadWriteLock" the SQLite-backed reader/writer lock run "PRAGMA journalmode=MEMORY" on a fresh connection for every acquire. That statement makes SQLite load the whole schema the "sqlitemaster" table, which lists every table and index with its "CREATE" text of whatever...

filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout

ReadWriteLock and AsyncReadWriteLock the SQLite-backed reader/writer lock run PRAGMA journalmode=MEMORY on a fresh connection for every acquire. That statement makes SQLite load the whole schema the sqlitemaster table, which lists every table and index with its CREATE text of whatever file sits a...

CLSA-2026-1777106754 sqlite: Fix of CVE-2018-8740

CVE-2018-8740: avoid a NULL pointer dereference when the sqlitemaster schema contains a corrupt CREATE TABLE AS entry...

sqlite: Fix of CVE-2018-8740

CVE-2018-8740: avoid a NULL pointer dereference when the sqlitemaster schema contains a corrupt CREATE TABLE AS entry...

CVE-2026-40315

PraisonAI is a multi-agent teams system. Prior to 4.5.133, there is an SQL identifier injection vulnerability in SQLiteConversationStore where the tableprefix configuration value is directly concatenated into SQL queries via f-strings without any validation or sanitization. Since SQL identifiers...

CVE-2026-33545

MobSF is a mobile application security testing tool used. Prior to version 4.4.6, MobSF's readsqlite function in mobsf/MobSF/utils.py lines 542-566 uses Python string formatting % to construct SQL queries with table names read from a SQLite database's sqlitemaster table. When a security analyst...