TI-2022-21236 CVE-2022-43441 · GHSA-jqv5-7xpx-qj74
Mass assignment in TryGhost node-sqlite3
Priority MEDIUM 47
A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1.
No TryGhost vulnerabilities are listed in CISA KEV.
3 records in Sqlite3 · all components
A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1.
The package sqlite3 before 5.0.3 are vulnerable to Denial of Service (DoS) which will invoke the toString function of the passed parameter.
Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and before allows a local attacker to cause a denial of service via a crafted script.