Hacker News new | ask | show | jobs
by jkrejcha 32 days ago
> a version of SQLite that has a severe vulnerability

Calling CVE-2025-70873 a severe vulnerability is a bit overplaying it imo. The vulnerability requires that you allow an attacker to import an arbitrary ZIP file

I looked at the vulnerability in question by the way, CVE-2025-70873, and it really is not that severe unless you're allowing users to import arbitrary ZIP files

1 comments

That's not the only CVE in question. The issue also involves CVE-2025-6965.