← All advisories

High severity8.1NVD Advisory· Published Dec 31, 2020· Updated Jun 17, 2026

CVE-2020-35871

CVE-2020-35871

Description

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API data race.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
rusqlitecrates.io	< 0.23.0	0.23.0

Affected products

3

Rusqlite Project/Rusqlite
cpe:2.3:a:rusqlite_project:rusqlite:*:*:*:*:*:rust:*:*
Range: <0.23.0
Rust/rusqlitedescription
ghsa-coords
pkg:cargo/rusqlite
Range: < 0.23.0

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-rjh8-p66p-jrh5ghsaADVISORY
github.com/rusqlite/rusqlite/releases/tag/0.23.0nvdRelease NotesThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2020-35871ghsaADVISORY
rustsec.org/advisories/RUSTSEC-2020-0014.htmlnvdThird Party AdvisoryWEB
github.com/rusqlite/rusqlite/commit/2ef3628dac35aeba0a97d5fb3a57746b4e1d62b3ghsaWEB

News mentions

0

No linked articles in our index yet.