Threats affecting pkg:pypi/mobile-security-framework-mobsf

CVE-2026-33545 is a medium severity SQL injection vulnerability in MobSF Mobile-Security-Framework versions prior to 4.4.6. The vulnerability exists in the read_sqlite() function, which uses unsafe Python string formatting to construct SQL queries with attacker-controlled table names from a SQLite database. This improper neutralization of special elements can lead to denial of service and SQL injection when analyzing malicious mobile applications with crafted SQLite databases. The issue is patched in version 4.4.6.