A GitHub repository published multiple SQLite vulnerability advisories, which were flagged as critical by NVD and CISA. JFrog security researchers found that the cited code did not exist in the referenced versions, and the proof-of-concept payloads failed to trigger the vulnerabilities.

The US National Institute of Standards and Technology (NIST) will no longer enrich most Common Vulnerabilities and Exposures (CVEs). This decision impacts the level of detail provided for many vulnerabilities in the database.