CyberRota Analysis
AI-GeneratedA flaw in Node.js's node:sqlite module allows a stale StatementSyncIterator to continue executing a cached prepared statement even after it has been reset and rebound with new parameters. This can lead to unexpected behavior and potential data integrity issues, as the iterator may operate on outdated data. Organizations using Node.js versions 22.x, 24.x, and 26.x should prioritize addressing this vulnerability to mitigate risks associated with improper statement execution.
Original NVD Description
A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore() to continue executing a cached prepared statement after it has been reset and rebound with new parameters. SQLTagStore resets cached statements using sqlite3_reset() directly, bypassing the iterator invalidation mechanism introduced for StatementSync in recent releases This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.