Updated advisory posts against rubysec/ruby-advisory-db@93673c3

Author: jasnow

advisories/_posts/2026-08-11-GHSA-mwm8-39rw-8826.md

@@ -0,0 +1,41 @@
+---
+layout: advisory
+title: 'GHSA-mwm8-39rw-8826 (sqlite3): Use-After-Free in SQLite Aggregate Arguments
+  in Heap-Allocated Argument Array'
+comments: false
+categories:
+- sqlite3
+advisory:
+  gem: sqlite3
+  ghsa: mwm8-39rw-8826
+  url: https://github.com/sparklemotion/sqlite3-ruby/security/advisories/GHSA-mwm8-39rw-8826
+  title: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array
+  date: 2026-08-11
+  description: |-
+    ## Summary
+
+    Using Database#create_aggregate, #create_aggregate_handler, or
+    Database#define_aggregator to define an aggregate function that takes
+    two or more arguments, and then evaluating it over TEXT or BLOB column
+    values, can free the Ruby objects holding those arguments while a
+    later argument is still being converted, during ordinary garbage
+    collection. The aggregate's step method then receives an incorrect
+    object, or the process crashes with a segmentation fault.
+
+    ## Credits
+
+    Reported by Jeremy Daer (@jeremy).
+  cvss_v4: 6.3
+  unaffected_versions:
+  - "< 1.4.0"
+  patched_versions:
+  - ">= 2.9.6"
+  related:
+    url:
+    - https://rubygems.org/gems/sqlite3/versions/2.9.6
+    - https://github.com/sparklemotion/sqlite3-ruby/blob/main/CHANGELOG.md#296--2026-08-11
+    - https://github.com/sparklemotion/sqlite3-ruby/security/advisories/GHSA-mwm8-39rw-8826
+  notes: |
+    - cvss_v4 from repo GHSA URL.
+    - No CVE in repo GHSA URL.
+---