GHSA-ff9q-rm55-q7qr
NoneCVSS
—
EPSS
—
Published
May 7, 2026
CISA due date
—
The record
diesel-async may expose uninitialized padding bytes for MySQL temporal columns
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | diesel-async | 0.1.0 | 0.9.0 |
Related vulnerabilities
- RUSTSEC-2026-0138 Unsound access to padding bytes while serializing date/time values using the Mysql backend Also affects diesel-async
- CVE-2026-112404 Pillow is a Python imaging library. CWE-126
- CVE-2026-112394 Pillow is a Python imaging library. CWE-126
- CVE-2026-85745 MariaDB server is a community developed fork of MySQL server. CWE-126
- CVE-2026-97399 The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8… CWE-126
- CVE-2026-94286 An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be… CWE-126
- CVE-2026-76653 A missing authentication vulnerability in the VPN configuration management has been… CWE-126
- CVE-2026-83949 Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose… CWE-126