Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-54619 1 Sparklemotion 1 Sqlite3-ruby 2026-07-29 N/A
sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, redefining a SQLite function with a different arity frees the previously registered function handler while SQLite may still reference it, resulting in a use-after-free. This issue is fixed in version 2.9.5.
CVE-2026-54620 1 Sparklemotion 1 Sqlite3-ruby 2026-07-28 N/A
sqlite3 provides Ruby bindings for the SQLite3 embedded database. From 2.1.0 to 2.9.4, the callbacks used for SQLite aggregate functions can be freed while still referenced during aggregation, resulting in a use-after-free. This issue is fixed in version 2.9.5.