Skip to content
OpenAdvisories
High DSA-5373-1 1 CVE

node-sqlite3 - security update

Published Mar 14, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 node-sqlite3 5.0.0+ds1-1+deb11u2

Vulnerabilities 1

  • High 8.1
    CVE-2022-43441

    sqlite vulnerable to code execution due to Object coercion

    A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can lead to arbitrary code execution. An attacker can provide malicious input to trigger this vulnerabili…

    Ghost Foundation node-sqlite3 node-sqlite3 sqlite3 Debian Ubuntu npm