Security vulnerabilities and automated fixes for better sqlite3 issues
1 post found
A high-severity SQL injection vulnerability was discovered in the `StateLedger` class's `readEvents()` method in `ts/src/state-ledger.ts`. The code constructed SQL queries using JavaScript template literals with dynamic input, creating an exploit primitive that could be chained with other weaknesses. The fix replaces template-based query construction with parameterized queries using SQLite's `?` placeholders.