CVE-2021-28305: Diesel

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in the diesel crate before 1.4.6 for Rust. There is a use-after-free in the SQLite backend because the semantics of sqlite3_column_name are not followed.

Affected products

• Diesel Diesel: before 1.4.6 (fixed in 1.4.6)

Published 2021-03-12. Last modified 2026-06-17.