{"action":"Upgrade diesel to 2.2.3 or later.","affected":[{"fixed":"2.2.3","introduced":"0"}],"component":"diesel","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["2.2.3"],"ghsa_id":"GHSA-wq9x-qwcq-mmgf","id":"tcs_01M5KF45K33TZPRTZMWTRWD70H","modified_at":"2025-10-28T06:29:26.412332Z","published_at":"2024-08-23T18:51:20Z","references":["https://osv.dev/vulnerability/GHSA-wq9x-qwcq-mmgf","https://github.com/diesel-rs/diesel/pull/4170","https://github.com/diesel-rs/diesel/commit/9eccd7d6d705ac53618bfd478152e32ec3b4536c","https://github.com/diesel-rs/diesel","https://github.com/diesel-rs/diesel/blob/ae82c4a5a133db65612b7436356f549bfecda1c7/diesel/src/pg/connection/stmt/mod.rs#L36","https://rustsec.org/advisories/RUSTSEC-2024-0365.html"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-wq9x-qwcq-mmgf","url":"https://osv.dev/vulnerability/GHSA-wq9x-qwcq-mmgf"}],"summary":"Diesel vulnerable to Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts"}