Sparklemotion Sqlite3-ruby vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Sparklemotion Sqlite3-ruby: 2 record(s), with affected versions and fixes.
CVE-2026-54620
Low · 2.0
CWE-416 Jul 28, 2026
sqlite3-ruby has Use-After-Free in SQLite Aggregate Function Callbacks
sqlite3 provides Ruby bindings for the SQLite3 embedded database. From 2.1.0 to 2.9.4, the callbacks used for SQLite aggregate functions can be freed while still referenced during aggregation, resulting in a use-after-free. This issue is fixed in version 2.9.5.
CVE-2026-54619
Low · 2.0
CWE-416 Jul 28, 2026
sqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity
sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, redefining a SQLite function with a different arity frees the previously registered function handler while SQLite may still reference it, resulting in a use-after-free. This issue is fixed in version 2.9.5.