What is GHSA-8m95-fffc-h4c5?

GHSA-8m95-fffc-h4c5 is a security advisory published by GitHub Security Advisories with Low severity. libsql-sqlite3-parser crash due to invalid UTF-8 input

Which CVE IDs does GHSA-8m95-fffc-h4c5 cover?

GHSA-8m95-fffc-h4c5 covers the following CVE IDs: CVE-2025-47736. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8m95-fffc-h4c5?

GHSA-8m95-fffc-h4c5 has a CVSS v3 base score of 2.9, published by GitHub Security Advisories.

Which products are affected by GHSA-8m95-fffc-h4c5?

GHSA-8m95-fffc-h4c5 affects 1 product, including: rust/libsql-sqlite3-parser:\u003c= 0.13.0.

GHSA-8m95-fffc-h4c5LowCVSS 2.9

libsql-sqlite3-parser crash due to invalid UTF-8 input

Vendor

GitHub Security Advisories

Published

May 9, 2025

Last Modified

May 9, 2025

🔗 CVE IDs covered (1)

CVE-2025-47736 →

📋 Description

dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8.

🎯 Affected products1

rust/libsql-sqlite3-parser:<= 0.13.0

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2025-47736
https://github.com/gwenn/lemon-rs/issues/86
https://github.com/tursodatabase/libsql/issues/2052
https://github.com/gwenn/lemon-rs/pull/8
https://crates.io/crates/libsql-sqlite3-parser
https://github.com/advisories/GHSA-8m95-fffc-h4c5