~ / search / GHSA-cm8g-544f-p9x9

GHSA-cm8g-544f-p9x9

Use After Free in rusqlite

Source: GitHub Advisory Database (reviewed) High CVE-2021-45716

Packages

EcosystemPackageAffectedFixed in
crates.io rusqlite >= 0.25.0, < 0.25.4 0.25.4
crates.io rusqlite >= 0.26.0, < 0.26.2 0.26.2

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_collation has a use-after-free.

References

External links from the advisory. They lead to third-party sites.