Reliance on Data/Memory Layout Affecting diesel package, versions <2.3.8
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-RUST-DIESEL-16771439
- published20 May 2026
- disclosed19 May 2026
- creditUnknown
Introduced: 19 May 2026
New CVE NOT AVAILABLE CWE-188 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade diesel to version 2.3.8 or higher.
Overview
diesel is an extensible ORM and Query Builder for Rust.
Affected versions of this package are vulnerable to Reliance on Data/Memory Layout in the SqliteAggregate interface. An attacker can cause undefined behavior or memory safety issues by registering a custom aggregate function with a type that requires non-standard alignment, leading to potential misaligned memory access.