Microsoft.Data.Sqlite seem to still have dependencies on known vulnerable versions of SQLite.
- Could we get the vulnerable versions marked as vulnerable please!?
- Can we get updated versions which are not vulnerable!?
- If we can't get updated versions please provide explanations, but still do 1!
2025-07-15 CVE-2025-6965 GHSA-2m69-gcr7-jv3q
2026-03-13 CVE-2025-70873 GHSA-p36r-6g67-869c (this one still does not mention the nuget packages)
2026-05-12 This issue created
2026-05-13 Multiple attempts at reporting this to MSRC
2026-06-17 GHSA-2m69-gcr7-jv3q Updated with the package
Microsoft.Data.Sqlite seem to still have dependencies on known vulnerable versions of SQLite.
2025-07-15 CVE-2025-6965 GHSA-2m69-gcr7-jv3q
2026-03-13 CVE-2025-70873 GHSA-p36r-6g67-869c (this one still does not mention the nuget packages)
2026-05-12 This issue created
2026-05-13 Multiple attempts at reporting this to MSRC
2026-06-17 GHSA-2m69-gcr7-jv3q Updated with the package