VULNERABILITY INTELLIGENCE

CVE-2022-21227

CVSS score7.5 HIGH
EPSS probability2.21%
CISA KEVNot currently listed
Published2022-05-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service (DoS) which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references