Ghost Sqlite3
3 CVEs affecting Ghost Sqlite3. Latest disclosed: 2023-04-11. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-43441 | High | 8.1 | 2023-03-16 | A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can l… |
CVE-2022-21227 | High | 7.5 | 2022-05-01 | The package sqlite3 before 5.0.3 are vulnerable to Denial of Service (DoS) which will invoke the toString function of the passed parameter. If passed an invali… |
CVE-2020-24736 | Medium | 5.5 | 2023-04-11 | Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and before allows a local attacker to cause a denial of service via a crafted script. |