Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
sparklemotion/sqlite3-ruby
main @ 73966f8
3
Fixes
0
CVEs
HIGH
Peak severity
33.3%
Coverage
Highlights
Memory Corruption: 2 prior fixes. Scrutinize any change in this area.
ext/sqlite3/database.c: most-fixed (2 issues). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Memory Corruption: Inadequate retention of Ruby-backed callbacks within the C extension allows the Ruby VM to garbage-collect active callback blocks, resulting in Use-After-Free vulnerabilities when SQLite executes custom database functions.
Memory Corruption: Failing to keep alive references to database aggregators during active statements or soft database closures exposes the driver to memory corruption when statements continue to refer to freed Ruby objects.
Command Injection: Directly interpolating untrusted matrix variables or action outputs inside GitHub Actions workflow run scripts can lead to command injection; environmental variables should be used instead.