This page collects WhisperX intelligence signals tagged #sqlite. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.
A security vulnerability in the Holocron application's SQLite storage layer creates its database directory with overly permissive, world-readable permissions. The flaw, coded in the `New()` function within `internal/store/sqlite/sqlite.go`, explicitly calls for the directory to be created with `0755` permissions. This ...
A critical security misconfiguration in the Claude desktop application exposes user data to any other user on the same machine. The application creates an SQLite database file, `~/.claude-peers.db`, with insecure default file permissions, allowing any local user account to read its contents. This database contains peer...
A MEDIUM severity vulnerability has been identified, stemming from a lack of size limits on user-submitted data fields. This security misconfiguration, classified under CWE-770 (Allocation of Resources Without Limits or Throttling) and OWASP A05:2021, creates a direct path for attackers to execute a Denial-of-Service (...
A critical SQL injection vulnerability has been identified in a product search function, where user-supplied search terms are directly embedded into SQLite Full-Text Search (FTS) queries without sanitization. The flaw, located in `src/infrastructure/sqlite/sqlite-product-repository.ts`, allows an attacker to manipulate...