What is GHSA-c8x7-qp4j-858w?

GHSA-c8x7-qp4j-858w is a security advisory published by GitHub Security Advisories with Medium severity. sqlite 3.41 is vulnerable to use after free in the JSON extraction function. After releasing...

Which CVE IDs does GHSA-c8x7-qp4j-858w cover?

GHSA-c8x7-qp4j-858w covers the following CVE IDs: CVE-2026-51298. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-c8x7-qp4j-858w?

GHSA-c8x7-qp4j-858w has a CVSS v3 base score of 6.2, published by GitHub Security Advisories.

GHSA-c8x7-qp4j-858wMediumCVSS 6.2

sqlite 3.41 is vulnerable to use after free in the JSON extraction function. After releasing...

Vendor

GitHub Security Advisories

Published

July 27, 2026

Last Modified

July 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-51298 →

📋 Description

sqlite 3.41 is vulnerable to use after free in the JSON extraction function. After releasing JsonParse object memory via jsonParseFree(), the program still accesses internal member of the freed pointer, which can cause service crash and denial of service.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-51298
https://github.com/programmervuln/cveadvisory-/blob/main/CVE-2026-51298
https://github.com/sqlite/sqlite/blob/master/src/json.c
https://github.com/advisories/GHSA-c8x7-qp4j-858w