Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

TI-2022-21236 CVE-2022-43441 · GHSA-jqv5-7xpx-qj74

Mass assignment in TryGhost node-sqlite3

Priority MEDIUM 47

A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02356 Published 2023-03-16 Fixed in 5.1.5 CWE-915
TI-2022-05619 CVE-2022-21227 · GHSA-9qrh-qjmc-5w2p

Denial of service (DoS) in sqlite3

Priority LOW 37

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service (DoS) which will invoke the toString function of the passed parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02213 Published 2022-05-01 Fixed in 5.0.3 CWE-248