crates.io/diesel: high 8.1
Diesel vulnerable to Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts
Action: Upgrade diesel to 2.2.3 or later.
cargo update -p diesel --precise 2.2.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.3 | - |
Fixed versions
| 2.2.3 |
Sources
- osv: GHSA-wq9x-qwcq-mmgf
- https://github.com/diesel-rs/diesel/pull/4170
- https://github.com/diesel-rs/diesel/commit/9eccd7d6d705ac53618bfd478152e32ec3b4536c
- https://github.com/diesel-rs/diesel
- https://github.com/diesel-rs/diesel/blob/ae82c4a5a133db65612b7436356f549bfecda1c7/diesel/src/pg/connection/stmt/mod.rs#L36
- https://rustsec.org/advisories/RUSTSEC-2024-0365.html
published · modified · JSON