Skip to main content

Get a free FHIR vulnerability scan, funded by Cantina.

All disclosures

Vulnerability disclosure

Stale SQLite iterators can replay bound writes

CVE-2026-58041

Affected product
Node.js
Severity
Medium · CVSS 5.3
Weakness
CWE-367
Disclosed

Summary

Stale SQLite iterators can replay bound writes. This medium-severity finding affects Node.js.

Technical analysis

The accompanying research article explains the finding, reproduction, and remediation status.

Read the technical write-up

Disclosure timeline

Public disclosure

Credits

Cantina · Agent-discovered and human-verified

References