CVE-2020-35867: Data races in rusqlite

August 25, 2021

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via create_module.

References

github.com/advisories/GHSA-28ph-f7gx-fqj8
github.com/rusqlite/rusqlite
github.com/rusqlite/rusqlite/commit/3c6b57fe1b2cc87e7ebecde43dd836ffb1c4ea5c
github.com/rusqlite/rusqlite/releases/tag/0.23.0
nvd.nist.gov/vuln/detail/CVE-2020-35867
rustsec.org/advisories/RUSTSEC-2020-0014.html

Code Behaviors & Features

Detect and mitigate CVE-2020-35867 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →