{
  "cveId": "CVE-2022-21227",
  "url": "https://patchblox.com/security/cve/CVE-2022-21227",
  "summary": "CVE-2022-21227 is fixed in node-sqlite3 on 1 platform, first by DEBIAN-CVE-2022-21227, released May 1, 2022. It is not reported as exploited. Patch Radar priority: High.",
  "title": "node-sqlite3: The package sqlite3 before 5.0.3 are vulnerable to Denial of Service (DoS) which will invoke the toString function of...",
  "description": "The package sqlite3 before 5.0.3 are vulnerable to Denial of Service (DoS) which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine.",
  "published": "2022-05-01T16:15:08Z",
  "severity": "high",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.02213,
  "epssPercentile": 0.82737,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "node-sqlite3",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.0.6\u002Bds1-1",
      "fix": "DEBIAN-CVE-2022-21227",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-21227",
      "released": "2022-05-01T16:15:08Z"
    },
    {
      "platform": "linux",
      "product": "node-sqlite3",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.0.6\u002Bds1-1",
      "fix": "DEBIAN-CVE-2022-21227",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-21227",
      "released": "2022-05-01T16:15:08Z"
    },
    {
      "platform": "linux",
      "product": "node-sqlite3",
      "release": "Debian 14",
      "fixedVersion": "5.0.6\u002Bds1-1",
      "fix": "DEBIAN-CVE-2022-21227",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-21227",
      "released": "2022-05-01T16:15:08Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}