sqlite 3.41 is vulnerable to use after free in the json.c jsonCacheInsert function of the JSON cache management module.

SQLite version 3.41 contains a use-after-free vulnerability in the jsonCacheInsert function located in the json.c source file, which is part of the JSON cache management module. Use-after-free vulnerabilities can lead to memory corruption, potentially allowing attackers to execute arbitrary code or cause application crashes. The vulnerability has been assigned CVE-2026-51291 and is currently awaiting full analysis by NVD. The affected component is specifically the JSON caching mechanism introduced in SQLite's JSON extension. SQLite is widely embedded in countless applications, operating systems, and platforms, making this vulnerability potentially high impact. A proof-of-concept advisory has been published on GitHub alongside a reference to the affected source file in the official SQLite repository. Organizations and developers using SQLite 3.41 should monitor for patches and apply updates when available.