crates.io/rusqlite CVE-2020-35866, CVE-2020-35867, CVE-2020-35868, CVE-2020-35869, CVE-2020-35870, CVE-2020-35871, CVE-2020-35872, CVE-2020-35873: critical 9.8, EPSS 1.74%

Use after free in rusqlite

Action: Upgrade rusqlite to 0.23.0 or later.

cargo update -p rusqlite --precise 0.23.0

Affected

Fixed versions

Sources

• osv: GHSA-q3cc-7p7g-392c
• https://nvd.nist.gov/vuln/detail/CVE-2020-35873
• https://github.com/rusqlite/rusqlite/commit/ac30e169ae51b262bc8cf7026469851ce39b23c6
• https://github.com/rusqlite/rusqlite
• https://github.com/rusqlite/rusqlite/releases/tag/0.23.0
• https://rustsec.org/advisories/RUSTSEC-2020-0014.html

CVE-2020-35866, CVE-2020-35867, CVE-2020-35868, CVE-2020-35869, CVE-2020-35870, CVE-2020-35871, CVE-2020-35872, CVE-2020-35873 · published 2021-08-25T20:47:43Z · modified 2024-03-15T00:05:20.033730Z · JSON