sqlite3

6.0.1 · 12 Mar 2026BSD-3-Clause1.4M / weekRepository npm Atom feed

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Paste your package.json, or type the range you declare for sqlite3. It is read in your browser and sent nowhere.

Line	Newest	Where it stands
	6.0.1	No known advisory
	5.1.7	Safe from 5.1.5 · last release Jan 2024, no longer updated

Your version

High
sqlite vulnerable to code execution due to Object coercionGHSA-jqv5-7xpx-qj74 · 13 Mar 2023
- 5.x5.0.0 – 5.1.4Fixed in 5.1.5
High
Denial-of-Service when binding invalid parameters in sqlite3GHSA-9qrh-qjmc-5w2p · 28 Apr 2022
- 5.x5.0.0 – 5.0.2Fixed in 5.0.3

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 21 Oct 2026. Releases and advisories last read 21 Oct 2026.