crates.io sqlx vulnerabilities

Latest crates.io sqlx CVEs

Newest publication first

1. GHSA-xmrp-424f-vfpx SQLx Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts

   Published 2024-08-19

   Unknown

   The following presentation at this year's DEF CON was brought to our attention on the SQLx Discord: SQL Injection isn't Dead: Smuggling Queries at the Protocol Level http://web.archive.org/web/20240812130923/https://media.defcon.org/DEF%20CON%2032/DEF%20CON%2032%20presentations/D...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.