Skip to content

SQLite vulnerbilities #38257

Description

@NiKiZe

Microsoft.Data.Sqlite seem to still have dependencies on known vulnerable versions of SQLite.

  1. Could we get the vulnerable versions marked as vulnerable please!?
  2. Can we get updated versions which are not vulnerable!?
  3. If we can't get updated versions please provide explanations, but still do 1!

2025-07-15 CVE-2025-6965 GHSA-2m69-gcr7-jv3q
2026-03-13 CVE-2025-70873 GHSA-p36r-6g67-869c (this one still does not mention the nuget packages)
2026-05-12 This issue created
2026-05-13 Multiple attempts at reporting this to MSRC
2026-06-17 GHSA-2m69-gcr7-jv3q Updated with the package

Metadata

Metadata

Type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions