CVE-2024-46488

The sqlite-vec extension (v0.1.1) is vulnerable to a heap buffer overflow within the npy_token_next function. An attacker can exploit this flaw by providing a crafted file , resulting in a Denial of Service (DoS) . To resolve this issue, users are recommended to upgrade to version 0.1.3 .