VulertSecurity VulertSecurity

Vulnerability Database · Search

Vulnerabilities matching "sqlite" — 731 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
Unrated Critical Vulnerability in python-filelock: SQLite Lock Database Exposure python-filelock Debian 20 Oct 2026 No fix published
5.0 medium Critical Vulnerability in Red Hat Hardened Images RPMs: Lemon and SQLite Packages Affected lemon Red Hat 17 Oct 2026 0:3.53.4-1.hum1
7.2 high Remote Code Execution Vulnerability in Adminer Package adminer Debian 12 Oct 2026 No fix published
Critical Critical Malicious Code Vulnerability in @revizahoshii/hoshino-store-sqlite Package @revizahoshii/hoshino-store-sqlite npm 12 Oct 2026 No fix published
8.6 high CVE-2026-105856: SQL Injection Vulnerability in @payloadcms/db-sqlite and @payloadcms/db-postgres @payloadcms/db-sqlite npm 07 Oct 2026 3.90.0
9.8 critical CVE-2026-105845: SQL Injection Vulnerability in Payload Package payload npm 06 Oct 2026 3.88.0
6.3 medium Use-After-Free Vulnerability in sqlite3 Ruby Gem: Aggregate Function Handling sqlite3 RubyGems 02 Oct 2026 2.9.6
8.1 high CVE-2026-87016: Open WebUI SQLite Vulnerability Allows Unauthorized Sign-in via Wildcard Characters open-webui PyPI 01 Oct 2026 0.11.1
9.9 critical CVE-2026-92938: vm2 Package Allows Arbitrary Native Code Execution via node:sqlite vm2 npm 01 Oct 2026 3.11.7
9.9 critical Critical Native Code Execution Vulnerability in vm2 Package vm2 npm 17 Sep 2026 No fix published
7.5 high CVE-2026-63460: Vendure Unauthenticated ReDoS Vulnerability via Regex Filter on SQLite Backends vendure/core npm 17 Sep 2026 3.6.5
5.3 medium CVE-2026-32599: Netmaker SQL Injection Vulnerability in SQLite Backend github.com/gravitl/netmaker Go 15 Sep 2026 1.5.0
8.1 high CVE-2026-87016: Open WebUI SQLite Vulnerability Allows Unauthorized Sign-in via Wildcard Characters open-webui PyPI 10 Sep 2026 0.11.1
7.8 high Critical Security Update for SQLite and Lemon Packages: CVE-2026-11822 and CVE-2026-11824 lemon-debuginfo Red Hat 02 Sep 2026 0:3.34.1-7.el9_4.2
7.8 high Critical Security Update for SQLite and Related Packages: CVE-2026-11822 and CVE-2026-11824 lemon-debuginfo Red Hat 02 Sep 2026 0:3.34.1-6.el9_2.3
7.8 high Critical Security Vulnerability in SQLite and Related Packages: Red Hat Advisory RHSA-2026:61697 lemon-debuginfo Red Hat 01 Sep 2026 0:3.46.1-5.el10_0.1
7.8 high Critical Security Flaw in mingw-sqlite: Arbitrary Code Execution Risk mingw-sqlite Rocky Linux 31 Aug 2026 0:3.26.0.0-3.el8_10
7.8 high Critical Security Update for mingw-sqlite: CVE-2026-11822 mingw-sqlite Red Hat 31 Aug 2026 0:3.26.0.0-3.el8_10
Unrated Critical Security Update for mingw-sqlite: Arbitrary Code Execution Vulnerability mingw32-sqlite AlmaLinux 31 Aug 2026 3.26.0.0-3.el8_10
2.1 low CVE-2026-77846: AshSqlite JSON Path Injection Vulnerability ash_sqlite Hex 30 Aug 2026 0.2.18

Showing the first 200 matches. Add filters to narrow the results.

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.