There is 1 open security issue in buster.
1 issue left for the package maintainer to handle:
- CVE-2022-21227:
(needs triaging)
The package sqlite3 before 5.0.3 are vulnerable to Denial of Service (DoS) which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine.
You can find information about how to handle this issue in the security team's documentation.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/n/node-sqlite3.png){kind=link}