~ / search / GHSA-g87r-23vw-7f87

GHSA-g87r-23vw-7f87

Use After Free in rusqlite

Source: GitHub Advisory Database (reviewed) High CVE-2021-45719

Packages

EcosystemPackageAffectedFixed in
crates.io rusqlite >= 0.25.0, < 0.25.4 0.25.4
crates.io rusqlite >= 0.26.0, < 0.26.2 0.26.2

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. update_hook has a use-after-free.

References

External links from the advisory. They lead to third-party sites.