Skip to content

Fix potential vulnerable cloned function#477

Open
npt-1707 wants to merge 2 commits intogentilkiwi:masterfrom
npt-1707:fix_CVE-2020-35527
Open

Fix potential vulnerable cloned function#477
npt-1707 wants to merge 2 commits intogentilkiwi:masterfrom
npt-1707:fix_CVE-2020-35527

Conversation

@npt-1707
Copy link

@npt-1707 npt-1707 commented Mar 8, 2026

Hi again,

Our tool identified another potential vulnerability in a clone function selectExpander() in modules/sqlite3.c sourced from sqlite/sqlite. These issues, originally reported in CVE-2020-35527, were resolved in the repository via this commit sqlite/sqlite@0990c41.

This PR applies the corresponding patch to fix the vulnerabilities in this codebase.

Please review at your convenience.

npt-1707 added 2 commits March 7, 2026 23:07
…ion of check-in [41c27bc0ff1d3135] by disallowing query flattening if the outer query is DISTINCT.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant