diesel (crates.io)
Advisories
14
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 2.3.10 or later clears every advisory below that has a fix.
Upgrade commands
cargo
cargo update -p diesel --precise 2.3.10Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-ggxf-9f6j-w742 Diesel has possible use after free when deserializing a SQLite database via `SqliteConnection::deserialize_readonly_database` |
Medium | >= 0.0.0-0, < 2.3.10 | 2.3.10 |
| GHSA-ggxf-9f6j-w742 Diesel has possible use after free when deserializing a SQLite database via `SqliteConnection::deserialize_readonly_database` |
Medium | < 2.3.10 | 2.3.10 |
| GHSA-h5x4-m2qf-r4f2 Diesel's SQLite backend has possible UTF-8 corruption |
High | >= 0.0.0-0, < 2.3.8 | 2.3.8 |
| GHSA-q8x8-jrhj-fh9p Diesel: Possible unaligned data access for implementations of `SqliteAggregate` |
Medium | < 2.3.8 | 2.3.8 |
| GHSA-q8x8-jrhj-fh9p Diesel: Possible unaligned data access for implementations of `SqliteAggregate` |
Medium | >= 0.0.0-0, < 2.3.8 | 2.3.8 |
| GHSA-m9p2-fxp5-v3fp Diesel: Command injection in Diesel's implementation of `COPY FROM`/`COPY TO` |
Medium | < 2.3.8 | 2.3.8 |
| GHSA-m9p2-fxp5-v3fp Diesel: Command injection in Diesel's implementation of `COPY FROM`/`COPY TO` |
Medium | >= 0.0.0-0, < 2.3.8 | 2.3.8 |
| RUSTSEC-2026-0135 Unsound transmute while debug/display printing batch Insert statements in Diesel's SQLite backend |
Not rated yet | >= 0.0.0-0, < 2.3.8 | 2.3.8 |
| GHSA-h5x4-m2qf-r4f2 Diesel's SQLite backend has possible UTF-8 corruption |
High | < 2.3.8 | 2.3.8 |
| RUSTSEC-2026-0134 Unsound access to padding bytes while serializing date/time values using the Mysql backend |
Not rated yet | >= 0.0.0-0, < 2.3.8 | 2.3.8 |
| GHSA-wq9x-qwcq-mmgf Diesel vulnerable to Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts |
High | < 2.2.3 | 2.2.3 |
| GHSA-wq9x-qwcq-mmgf Diesel vulnerable to Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts |
High | >= 0.0.0-0, < 2.2.3 | 2.2.3 |
| RUSTSEC-2021-0037 Fix a use-after-free bug in diesels Sqlite backend |
Critical EPSS 1.32% |
< 1.4.6 | 1.4.6 |
| RUSTSEC-2021-0037 Fix a use-after-free bug in diesels Sqlite backend |
Critical EPSS 1.32% |
>= 0.0.0-0, < 1.4.6 | 1.4.6 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor