....
CVEs ("Common Vulnerabilities and Exposures") about SQLite probably do not apply to your use of SQLite.

All historical vulnerabilities reported against SQLite require at least one of these preconditions:

- The attacker can submit and run arbitrary SQL statements.

- The attacker can submit a maliciously crafted database file to the application that the application will then open and query.

Few real-world applications meet either of these preconditions, and hence few real-world applications are vulnerable, even if they use older and unpatched versions of SQLite.

The SQLite development team fixes bugs promptly, usually within hours of discovery. New releases of SQLite are issued if the bug seems likely to impact real-world applications.

Grey-hat hackers are rewarded based on the number and severity of CVEs that they write. This results in a proliferation of CVEs that have minor impact, or no impact at all, but which make exaggerated impact claims.

Very few CVEs written about SQLite are real vulnerabilities in the sense that they do not give any new capabilities to an attacker.
....