{"items":[{"id":"CVE-2026-119591","published":"2026-10-30T11:31:15.714Z","updated":"2026-11-04T22:23:31.927Z","title":"SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause","severity":"MEDIUM","score":6.8,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2026-119586","published":"2026-10-30T11:31:15.070Z","updated":"2026-10-30T16:19:09.235Z","title":"SQLite CLI through 3.54.1 Command Injection via .recover Output","severity":"HIGH","score":8.5,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.01545,"kevAdded":null},{"id":"CVE-2026-119379","published":"2026-10-30T11:30:43.335Z","updated":"2026-10-30T16:02:09.331Z","title":"SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind()","severity":"HIGH","score":8.5,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00278,"kevAdded":null},{"id":"CVE-2026-119378","published":"2026-10-30T11:30:42.626Z","updated":"2026-10-30T15:56:16.807Z","title":"SQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite()","severity":"MEDIUM","score":6.8,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2026-119377","published":"2026-10-30T11:30:41.921Z","updated":"2026-11-05T21:11:01.483Z","title":"SQLite before 3.54.0 Authorizer Bypass via RIGHT or FULL JOIN USING","severity":"LOW","score":2,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2026-119376","published":"2026-10-30T11:30:41.213Z","updated":"2026-11-04T02:07:18.766Z","title":"SQLite before 3.54.0 Stack Exhaustion via COLLATE Operator Chain","severity":"MEDIUM","score":6.8,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00183,"kevAdded":null},{"id":"CVE-2026-119375","published":"2026-10-30T11:30:40.533Z","updated":"2026-10-30T15:52:57.646Z","title":"SQLite before 3.54.0 Information Disclosure via WAL Page Size Mismatch","severity":"MEDIUM","score":6.8,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2026-119374","published":"2026-10-30T11:30:39.834Z","updated":"2026-10-30T15:56:39.115Z","title":"SQLite before 3.54.0 Heap Buffer Overflow via FTS5 fts5DoSecureDelete()","severity":"HIGH","score":8.5,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.0023,"kevAdded":null},{"id":"CVE-2026-119373","published":"2026-10-30T11:30:39.153Z","updated":"2026-11-05T21:09:56.737Z","title":"SQLite before 3.54.0 FTS5 Heap Buffer Overflow via fts5MergeRowidLists()","severity":"HIGH","score":8.5,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2026-119372","published":"2026-10-30T11:30:38.453Z","updated":"2026-11-04T02:06:19.621Z","title":"SQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet()","severity":"MEDIUM","score":6.8,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00147,"kevAdded":null},{"id":"CVE-2026-119371","published":"2026-10-30T11:30:37.740Z","updated":"2026-10-30T15:51:05.359Z","title":"SQLite before 3.54.0 Stack Exhaustion via CTE Chain in selectExpander()","severity":"MEDIUM","score":6.8,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00191,"kevAdded":null},{"id":"CVE-2026-11824","published":"2026-06-09T19:21:42.603Z","updated":"2026-10-15T01:12:18.879Z","title":"SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate","severity":"HIGH","score":8.5,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2026-11822","published":"2026-06-09T19:08:31.019Z","updated":"2026-10-30T01:22:48.782Z","title":"SQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeek","severity":"MEDIUM","score":6.8,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2025-7458","published":"2025-07-29T12:43:19.427Z","updated":"2025-07-29T13:30:52.617Z","title":"SQLite integer overflow in key info allocation may lead to information disclosure.","severity":"MEDIUM","score":6.9,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00353,"kevAdded":null},{"id":"CVE-2025-6965","published":"2025-07-15T13:44:00.784Z","updated":"2026-11-03T22:13:16.678Z","title":"Integer Truncation on SQLite","severity":"HIGH","score":7.2,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.73452,"kevAdded":null},{"id":"CVE-2025-3277","published":"2025-04-14T16:50:48.902Z","updated":"2026-10-15T01:02:02.335Z","title":"An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then…","severity":"MEDIUM","score":6.9,"vendor":"SQLite","product":"sqlite","kev":false,"epss":0.01252,"kevAdded":null},{"id":"CVE-2025-29088","published":"2025-04-10T00:00:00.000Z","updated":"2026-10-15T01:05:58.729Z","title":"In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash). An…","severity":"MEDIUM","score":5.6,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00221,"kevAdded":null},{"id":"CVE-2025-29087","published":"2025-04-07T00:00:00.000Z","updated":"2026-10-15T01:05:57.161Z","title":"In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the…","severity":"LOW","score":3.2,"vendor":"SQLite","product":"SQLite","kev":false,"epss":0.00533,"kevAdded":null}]}