~ / search / GHSA-f6f2-3w33-54r9

GHSA-f6f2-3w33-54r9

Use After Free in rusqlite

Source: GitHub Advisory Database (reviewed) High CVE-2021-45714

Packages

EcosystemPackageAffectedFixed in
crates.io rusqlite >= 0.25.0, < 0.25.4 0.25.4
crates.io rusqlite >= 0.26.0, < 0.26.2 0.26.2

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_aggregate_function has a use-after-free.

References

External links from the advisory. They lead to third-party sites.