An issue was discovered in the diesel crate before 1.4.6 for Rust. There is a use-after-free in the SQLite backend because the semantics of sqlite3columnname are not followed.
{ "nvd_published_at": "2021-03-12T09:15:00Z", "github_reviewed_at": "2022-06-16T23:50:24Z", "severity": "CRITICAL", "github_reviewed": true, "cwe_ids": [ "CWE-416" ] }