crates.io/diesel CVE-2021-28305: critical 9.8, EPSS 1.32%
Fix a use-after-free bug in diesels Sqlite backend
Action: Upgrade diesel to 1.4.6 or later.
cargo update -p diesel --precise 1.4.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 1.4.6 | - |
Fixed versions
| 1.4.6 |
Sources
- osv: RUSTSEC-2021-0037
- https://crates.io/crates/diesel
- https://rustsec.org/advisories/RUSTSEC-2021-0037.html
- https://github.com/diesel-rs/diesel/pull/2663
CVE-2021-28305 · published · modified · JSON