crates.io/diesel CVE-2021-28305: critical 9.8, EPSS 1.32%

Fix a use-after-free bug in diesels Sqlite backend

Action: Upgrade diesel to 1.4.6 or later.

cargo update -p diesel --precise 1.4.6

Affected

Fixed versions

Sources

• osv: GHSA-j8q9-5rp9-4mv9
• https://nvd.nist.gov/vuln/detail/CVE-2021-28305
• https://github.com/diesel-rs/diesel/pull/2663
• https://github.com/diesel-rs/diesel
• https://rustsec.org/advisories/RUSTSEC-2021-0037.html

CVE-2021-28305 · published 2022-05-24T17:44:31Z · modified 2023-11-08T04:05:29.499484Z · JSON