go-gorm / go-gorm/sqlite

Heap-based Buffer Overflow reported in dependency mattn/go-sqlite3 package

Open
#176 0 comments 0 reactions 1 assignee Claimed by @jinzhu View on GitHub
Dominant language
Go
Stars
231
Forks
217
PR merge metrics
No merged PRs in 30d

Description

## Description

CVE-2023-7104 has been reported for github.com/mattn/go-sqlite3 package, versions <1.14.18
as reported by Snyk
https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMMATTNGOSQLITE3-6139875

This dependency update has an already existing PR created by dependabot
https://github.com/go-gorm/sqlite/pull/175

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.