Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-29088
5.6
MEDIUMCVSS v3
Published
April 10, 2025
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash). An sz*nBig multiplication is not cast to a 64-bit integer, and consequently some memory allocations may be incorrect.
sqlite
NPMSQLite client for Node.js applications with SQL-based migrations API written in Typescript
NPMSQLite client for Node.js applications with SQL-based migrations API written in Typescript= 3.49.0NVD
sqlite/sqlite
GitHub
