Sqlite CVEs.
Published CVEs affecting Sqlite, ranked by exploit odds.
-
CVE-2026-119377
SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorizer only for the first joined table's USING column. Attackers able to submit SQL can query a shared USING column in a RIGHT or FULL JOIN to read columns denied via sqlite3_set_authorizer() SQLITE_READ restrictions.
All CVEs affecting Sqlite that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.