Executive brief
Possible use after free when deserializing a SQLite database via `SqliteConnection::deserialize_readonly_database`
Affected products
- crates.io diesel
Junglewise Threat Intelligence
RUSTSEC-2026-0172 - Possible use after free when deserializing a SQLite database via `SqliteConnection::deserialize_readonly_database`
Severity: info · Published 2026-06-05
Technologies: diesel (crates.io). Vendors: crates.io.
Related threats
- Diesel has possible use after free when deserializing a SQLite database via `SqliteConnection::deserialize_readonly_database`
- Diesel use after free in SqliteConnection deserialize_readonly_database
- Diesel argument injection in PostgreSQL COPY FROM and COPY TO
- Diesel: Command injection in Diesel's implementation of `COPY FROM`/`COPY TO`
- Diesel unaligned data access in SqliteAggregate