VYPR

ruby-sqlite3

by Debian

CVEs (2)

  • CVE-2026-54620Jul 29, 2026
    risk 0.00cvss epss

    sqlite3 provides Ruby bindings for the SQLite3 embedded database. From 2.1.0 to 2.9.4, the callbacks used for SQLite aggregate functions can be freed while still referenced during aggregation, resulting in a use-after-free. This issue is fixed in version 2.9.5.

  • CVE-2026-54619Jul 29, 2026
    risk 0.00cvss epss

    sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, redefining a SQLite function with a different arity frees the previously registered function handler while SQLite may still reference it, resulting in a use-after-free. This issue is…