~ / search / GHSA-87xh-9q6h-r5cc

GHSA-87xh-9q6h-r5cc

Use After Free in rusqlite

Source: GitHub Advisory Database (reviewed) High CVE-2021-45715

Packages

EcosystemPackageAffectedFixed in
crates.io rusqlite >= 0.25.0, < 0.25.4 0.25.4
crates.io rusqlite >= 0.26.0, < 0.26.2 0.26.2

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_window_function has a use-after-free.

References

External links from the advisory. They lead to third-party sites.