RUGGEDCOM CROSSBOW SAC before 6.0 includes vulnerable SQLite code
Five SQLite flaws can yield code execution, denial of service, or information disclosure; the product fix is V6.0 or later.
60
Product
SQLite
- Mentions · 7d0
- Mentions · 30d7
- All mentions11
- First seenSep 7, 2026
- Last mentioned11d ago
Timeline
11 articles · newest firstNode.js patches high-severity flaws in 22.x, 24.x, and 26.x
Fixes include a Brotli out-of-bounds write that can allow remote code execution, plus TLS hostname bypasses.
74
Willison tests Claude Code Ultracode by building a SQLite SPARQL extension
A mistyped phone prompt still led Ultracode to coordinate subagents toward a Rust extension called sparqlite.
18
Under the hood, off the hot path: How D1 scales to millions of databases
Cloudflare explains how the D1 control plane scales to millions of serverless SQLite databases.
32
DuoDiscover searches optimizations with cheap proxy evaluators
Authors say it doubles expert speedup on SWE-fficiency and reports 1.92 times vLLM and 1.38 times SQLite.
52
apsw: Another Python SQLite Wrapper
APSW, another Python wrapper for SQLite, was posted on Hacker News with no security findings.
4
Back to the Future: Rethinking EDA Infrastructure for Agentic Systems in Chip Design Verification
BTTF uses multi-agent SQL over simulation dumps to automate chip-design verification queries.
40
Supabase Is Acquiring Turso
Supabase is acquiring Turso to offer on-demand SQLite databases for AI agents alongside Postgres.
46
datasette-explain 0.2.2
Simon Willison released datasette-explain 0.2.2, a Datasette plugin adding SQLite explain-plan support on read-only stored-query pages.
5
USN-8775-1: SQLite vulnerability
Ubuntu issued USN-8775-1 fixing a buffer overflow in SQLite's sqlar extension that could cause denial of service via a crafted archive.
20
Show HN: Engrim – A universal, local-first SQLite memory engine for AI CLIs
Developer launches Engrim, an open-source local-first SQLite memory engine giving AI CLI agents persistent memory.
18
Related CVEs
by mentions- CVE-2026-11149783%9.2Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
- CVE-2025-70873<1%7.5An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory…
- TLS hostname mismatch in Node.js for leading-zero IPv4
- CVE-2026-105482<1%7.4NUL-byte truncation in Node.js dns.resolve* and dns.reverse
- TLS hostname check bypass in Node.js 24.x and 26.x
- CVE-2026-11822<1%6.8SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by…
- A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint when the client connects using a…
- A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into…
- A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--allow-fs-read` or `--allow-fs-write` rule
- A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permission checks
Appears with
- vLLMproduct · 1
- Workers KVproduct · 1
- datasette-explainproduct · 1
- Datasettevendor · 1
- c-aresproduct · 1
- Supabaseorganization · 1
- D1product · 1
- Canonicalvendor · 1
- Tursovendor · 1
- RUGGEDCOM CROSSBOW Station Access Controllerproduct · 1
- Postgresproduct · 1
- Supabasevendor · 1
- sparqliteproduct · 1
- Node.jsvendor · 1
- CTO.neworganization · 1
- OpenSSLproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.