GHSA-ff9q-rm55-q7qr: diesel-async may expose uninitialized padding bytes for MySQL temporal columns
diesel-async exposes uninitialized stack padding to safe code on every read of a MySQL DATE, TIME, DATETIME, or TIMESTAMP column. Reading that buffer is undefined behavior, and the leaked bytes can contain stale heap/stack contents, so this is both a soundness bug and a potential information-disclosure vector.
References
Code Behaviors & Features
Detect and mitigate GHSA-ff9q-rm55-q7qr with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →