Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-46908
7.3
HIGHCVSS v3
Published
December 12, 2022
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.
sqlite
NPMSQLite client for Node.js applications with SQL-based migrations API written in Typescript
NPMSQLite client for Node.js applications with SQL-based migrations API written in Typescript= *, >= 3.37.0, < 3.40.1NVD
sqlite/sqlite
GitHub
