---
author: "Umesh Malik"
canonical: "https://umesh-malik.com/blog/tag/sqlite"
description: "Explore articles tagged with SQLite by Umesh Malik — AI Engineer, LLM & GenAI Developer. Learn SQLite best practices, practical tips, and in-depth guides."
title: "Umesh Malik's Blog - SQLite Articles | SQLite Tutorials"
tokens: 285
generator: "scripts/generate-page-markdown.mjs"
---

[← Back to Blog](https://umesh-malik.com/blog)

# SQLite

2 articles

 [![Diagram of the Datasette filter injection — a query-string column name flows unquoted into generated SQL and returns rows from a private table](https://umesh-malik.com/blog/datasette-sql-injection-patch-cover.png)

Web Engineering • Aug 7, 2026

### Fix the Datasette SQL Injection: Why execute-sql Won't Save You

The Datasette SQL injection patched in 1.0a38 and 0.65.3 leaks private tables via unescaped filter columns. The check, upgrade, and why execute-sql is no fix.

8 min read

Read more →](https://umesh-malik.com/blog/datasette-sql-injection-patch)

 [![A fabricated CVE advisory flowing unverified into the public vulnerability database pipeline](https://umesh-malik.com/blog/fake-cve-reports-ai-slop-sqlite-cover.png)

AI Security • Aug 4, 2026

### Fake CVE Reports: 54 of 55 SQLite Advisories Were AI Slop

Fake CVE reports are now cheaper to write than to disprove. JFrog found 54 of 55 SQLite advisories fabricated by an LLM. How to spot them before you patch.

11 min read

Read more →](https://umesh-malik.com/blog/fake-cve-reports-ai-slop-sqlite)