This hit the news yesterday: SQLite contained a remote code execution bug. According to the ZDNet article the bug has been fixed as of v3.26.0 released December 1st.
If your application uses SQLite, you may want to look into updating it.
formatting link
formatting link
George