critical9.8
CVE-2021-28305
Fix a use-after-free bug in diesels Sqlite backend
Impact
An issue was discovered in the diesel crate before 1.4.6 for Rust. There is a use-after-free in the SQLite backend because the semantics of sqlite3_column_name are not followed.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | diesel | < 1.4.6 | 1.4.6 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Diesel | Diesel | before 1.4.6 |