SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade sqlite-debuginfoUpgrade sqlite-docUpgrade sqlite-develUpgrade sqlite-toolsUpgrade sqlite-libsUpgrade sqlite-tools-debuginfoUpgrade sqlite-tcl-debuginfoUpgrade sqlite-analyzerUpgrade sqlite-tclUpgrade lemon-debuginfoUpgrade lemonUpgrade sqlite-libs-debuginfoUpgrade sqliteUpgrade sqlite-debugsourceUpgrade sqlite-analyzer-debuginfo | May 14, 2025 | Dec 12, 2022 |
| Debian | — | Upgrade sqlite3 | Jul 30, 2024 | Dec 12, 2022 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Gentoo Linux | — | Upgrade dev-db/sqlite. | Nov 27, 2023 | Dec 12, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade sqlite | Mar 24, 2023 | Dec 12, 2022 |
| Suse | — | Upgrade libsqlite3-0-32bitUpgrade sqlite3Upgrade sqlite3-tclUpgrade sqlite3-docUpgrade libsqlite3-0Upgrade sqlite3-devel | Dec 22, 2022 | Dec 12, 2022 |
| Ubuntu | — | Upgrade libsqlite3-0 | Jan 4, 2024 | Dec 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 12, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub