~ / search / GHSA-j8q9-5rp9-4mv9

GHSA-j8q9-5rp9-4mv9

Fix a use-after-free bug in diesels Sqlite backend

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-28305

Packages

EcosystemPackageAffectedFixed in
crates.io diesel < 1.4.6 1.4.6

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the diesel crate before 1.4.6 for Rust. There is a use-after-free in the SQLite backend because the semantics of sqlite3_column_name are not followed.

References

External links from the advisory. They lead to third-party sites.