search

prisma / quaint

SQL Query AST and Visitor for Rust
Apache License 2.0
582 stars 61 forks source link

Security alert [severity high] - `libsqlite3-sys` via C SQLite improperly validates array index #455

Open carlos-rian opened 1 year ago

carlos-rian commented 1 year ago

The latest possible version of libsqlite3-sys that can be installed is 0.22.2.

The earliest fixed version is 0.25.1.

image

SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.