Vulnerabilidades do Sparklemotion Sqlite3-ruby
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Sparklemotion Sqlite3-ruby: 2 registro(s), com versões afetadas e correções.
CVE-2026-54620
Baixa · 2.0
CWE-416 28/07/2026
sqlite3-ruby has Use-After-Free in SQLite Aggregate Function Callbacks
sqlite3 provides Ruby bindings for the SQLite3 embedded database. From 2.1.0 to 2.9.4, the callbacks used for SQLite aggregate functions can be freed while still referenced during aggregation, resulting in a use-after-free. This issue is fixed in version 2.9.5.
CVE-2026-54619
Baixa · 2.0
CWE-416 28/07/2026
sqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity
sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, redefining a SQLite function with a different arity frees the previously registered function handler while SQLite may still reference it, resulting in a use-after-free. This issue is fixed in version 2.9.5.