Potential security issue on Sqlite3 driver
Open
- Dominant language
- Go
- Stars
- 831
- Forks
- 124
- PR merge metrics
- No merged PRs in 30d
Description
Sqlite3 has the following vulnerability up to version 3.43.0: [CVE-2023-7104](https://www.cve.org/CVERecord?id=CVE-2023-7104).
Should the go-sqlite3 dependency be updated to version [1.14.18](https://github.com/mattn/go-sqlite3/compare/v1.14.17...v1.14.18), that seems to fix the issue?
Thanks
Mauro
Contributor guide
No contributing guide indexed for this repository
Research direction
No dependency file or test is named. Start by locating the go-sqlite3 dependency declaration, compare its current version with 1.14.18, and verify that the update addresses CVE-2023-7104 without regressions. Done means the dependency is updated and the repository’s existing checks pass.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, sqlite
- Domain
- databases, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100