| Package | Affected versions | Patched versions |
|---|---|---|
| sqlite | ≥ 3.39.2, < 3.41.2 | 3.41.2 |
An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free