Debian Linux Security Advisory 5373-1 - Dave McDaniel discovered that the SQLite3 bindings for Node.js were susceptible to the execution of arbitrary JavaScript code if a binding parameter is a crafted object.
be782c388a489c999750974e659e9b01cb240c9b62f2c79d5206b4142b32021d