Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-70873
7.5
HIGHCVSS v3
Published
March 12, 2026
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.
sqlite
NPMSQLite client for Node.js applications with SQL-based migrations API written in Typescript
NPMSQLite client for Node.js applications with SQL-based migrations API written in Typescript< 3.51.1NVD
sqlite/sqlite
GitHub
