Skip to content
OpenAdvisories

Vendor

SQLite

21 known vulnerabilities.

Products

SQLite 18 FTS5 1 SQLite3 1 sqldiff 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.5
    CVE-2026-119377

    SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING

    SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read column…

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu
  • Low 3.2
    CVE-2025-29087

    In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the e…

    SQLite SQLite sqlite3 sqlite3 Debian Ubuntu Alpine