`diesel`

Ecosystem:
cargo

Package URL:
pkg:cargo/diesel

Total PRs:
234 Dependabot PRs

Latest PR:
5 days ago

Unique Repositories:
105 repositories

Unique Repos (30 days):
6 repositories

Security Advisories

Diesel: Command injection in Diesel's implementation of `COPY FROM`/`COPY TO`

GHSA-m9p2-fxp5-v3fp MODERATE published 24 days ago • updated 3 days ago

Diesel allows users to configure various options for PostgreSQL's `COPY FROM` and `COPY TO` statements. These configurations are partially provided...

Diesel: Possible unaligned data access for implementations of `SqliteAggregate`

GHSA-q8x8-jrhj-fh9p MODERATE published 24 days ago • updated 3 days ago

Diesel allows to register custom aggregate SQL functions for SQLite via the `SqliteAggregate` interface. To store an instance of the custom aggreg...

Diesel vulnerable to Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts

GHSA-wq9x-qwcq-mmgf HIGH published almost 2 years ago • updated about 1 month ago

The following presentation at this year's DEF CON was brought to our attention on the Diesel Gitter Channel: > SQL Injection isn't Dead: Smuggling...

2.3.9 → 2.3.10 Patch PR

Open 5 days ago 1 comment

chore(deps): bump diesel from 2.3.9 to 2.3.10

palpo-im/palpo #234

2.3.9 → 2.3.10 Patch PR

Open 5 days ago 2 comments

build(deps): bump diesel from 2.3.9 to 2.3.10

brianmay/phone_db_rust #44

2.3.9 → 2.3.10 Patch PR

Closed 7 days ago 2 comments

build(deps): bump the cargo group across 1 directory with 23 updates

AerynOS/os-tools #795

2.3.7 → 2.3.9 Patch PR

Open 9 days ago 1 comment

build(deps): bump the patch group across 1 directory with 8 updates

manthanabc/paws #138

2.3.7 → 2.3.9 Patch PR

Closed 26 days ago 1 comment

chore(deps)(deps): bump the production-dependencies group across 1 directory with 10 updates

BoldyrevNS/dj-arbuzzz #27

2.3.6 → 2.3.9 Patch PR

Open about 1 month ago 1 comment

Bump the cargo group across 1 directory with 14 updates

bwarelabs/aptos-indexer-processors #28

2.1.4 → 2.1.6 Patch PR

Closed about 1 month ago 2 comments

build(deps): bump the cargo group across 1 directory with 16 updates

cyborg-ai-git/crates.io #13

2.2.7 → 2.2.12 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the prod-deps group across 1 directory with 14 updates

mozilla-services/syncstorage-rs #2287

2.3.6 → 2.3.9 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump diesel from 2.3.7 to 2.3.9

pallab-js/r-msf #25

2.3.7 → 2.3.9 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump diesel from 2.3.7 to 2.3.8

annie-mei/annie-mei #293

2.3.7 → 2.3.8 Patch PR

Closed about 2 months ago 3 comments

Bump the minor group with 21 updates

hut8/soar #1273

2.3.7 → 2.3.8 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the rust-minor-patch group in /src-tauri with 16 updates

javipelopi/streamforge #6

2.3.5 → 2.3.7 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the prod-deps group across 1 directory with 11 updates

mozilla-services/syncstorage-rs #2191

2.3.6 → 2.3.7 Patch PR

Closed 2 months ago 1 comment

Bump the cargo group across 1 directory with 9 updates

q1blue/rebuilderd #2

1.4.8 → 2.2.3 Major PR

Closed 3 months ago 2 comments

chore(deps): bump the cargo group across 3 directories with 20 updates

jadenblack/AppFlowy #4

1.4.8 → 2.2.3 Major PR

Closed 3 months ago 1 comment

build(deps): bump the cargo group across 2 directories with 12 updates

szabiiii/graph-node #5

2.2.1 → 2.2.3 Patch PR

Closed 4 months ago 1 comment

Bump the cargo group across 1 directory with 8 updates

q1blue/rebuilderd #1

1.4.8 → 2.2.3 Major PR

Open 4 months ago 1 comment

Build(deps): Bump the cargo-deps group across 1 directory with 62 updates

rust-benchmark1/yew #34

2.2.12 → 2.3.6 Minor PR

Open 4 months ago 1 comment

chore(deps): bump the rust-dependencies group across 1 directory with 7 updates

nvisycom/server #61

2.3.5 → 2.3.6 Patch PR

Closed 4 months ago 1 comment

Bump diesel from 2.3.3 to 2.3.6

leynos/diesel-cte-ext #24

2.3.3 → 2.3.6 Patch PR

Open 5 months ago 2 comments

Build(deps): bump diesel from 2.3.5 to 2.3.6

leynos/corbusier #20

2.3.5 → 2.3.6 Patch PR

Open 5 months ago 2 comments

build(deps): bump diesel from 2.3.3 to 2.3.6

MontyCoder0701/axum-starter #19

2.3.3 → 2.3.6 Patch PR

Closed 5 months ago 1 comment

build(deps): bump diesel from 2.3.4 to 2.3.6

s0j0hn/rust-gallery #52

2.3.4 → 2.3.6 Patch PR

Closed 5 months ago 1 comment

build(deps): bump the deps group across 1 directory with 18 updates

beyondessential/tamanu-meta-server #96

2.3.4 → 2.3.5 Patch PR

Closed 5 months ago 1 comment

Bump the rust-updates group across 1 directory with 17 updates

gitbutlerapp/gitbutler #11679

2.3.4 → 2.3.5 Patch PR

Closed 5 months ago 2 comments

deps(deps): bump the rust-runtime group across 1 directory with 7 updates

ImShyMike/rustytime #30

2.3.4 → 2.3.5 Patch PR

Open 6 months ago 1 comment

build(deps): bump the deps group across 1 directory with 10 updates

beyondessential/tamanu-meta-server #92

2.3.4 → 2.3.5 Patch PR

Closed 6 months ago 1 comment

build(deps): bump the cargo group across 1 directory with 26 updates

AerynOS/os-tools #641

2.3.1 → 2.3.5 Patch PR

Closed 6 months ago 2 comments

chore(deps): bump the cargo-deps group with 10 updates

shymega/scrob #149

2.1.4 → 2.3.5 Minor PR

Closed 6 months ago 1 comment

Bump diesel from 2.3.3 to 2.3.5

leynos/diesel-cte-ext #12

2.3.3 → 2.3.5 Patch PR

Open 6 months ago 3 comments

chore(deps): bump diesel from 2.3.1 to 2.3.5

chess-seventh/rusty_cv_creator #82

2.3.1 → 2.3.5 Patch PR

Open 6 months ago 1 comment

Bump diesel from 2.3.4 to 2.3.5

wasabipesto/nice #47

2.3.4 → 2.3.5 Patch PR

Open 6 months ago 1 comment

build(deps): bump diesel from 2.3.2 to 2.3.5

s0j0hn/rust-gallery #38

2.3.2 → 2.3.5 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump diesel from 2.3.4 to 2.3.5

kitsudaiki/ainari #776

2.3.4 → 2.3.5 Patch PR

Closed 6 months ago 1 comment

build(deps): bump diesel from 2.3.4 to 2.3.5

brianmay/penguin_nurse #226

2.3.4 → 2.3.5 Patch PR

Closed 6 months ago 1 comment

Bump the all-rust-dependencies group across 1 directory with 19 updates

demhadais/cellnoor #307

2.3.2 → 2.3.4 Patch PR

Closed 6 months ago 1 comment

build(deps): bump the cargo group across 1 directory with 25 updates

AerynOS/os-tools #625

2.3.1 → 2.3.4 Patch PR

Closed 6 months ago 2 comments

Bump diesel from 2.3.2 to 2.3.4

mensatt/crust #35

2.3.2 → 2.3.4 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump the cargo-deps group with 10 updates

shymega/scrob #145

2.1.4 → 2.2.12 Minor PR

Closed 6 months ago 1 comment

chore(deps)(deps): bump the production-dependencies group across 1 directory with 4 updates

UNC-GDSC/Rust-URL-Shortening #9

2.3.3 → 2.3.4 Patch PR

Closed 6 months ago 2 comments

build(deps): bump the cargo group across 1 directory with 23 updates

AerynOS/os-tools #624

2.3.1 → 2.3.4 Patch PR

Closed 6 months ago 2 comments

build(deps): bump the deps group across 1 directory with 6 updates

beyondessential/tamanu-meta-server #86

2.3.3 → 2.3.4 Patch PR

Closed 6 months ago 1 comment

Bump the all-rust-dependencies group across 1 directory with 15 updates

demhadais/scamplers #303

2.3.2 → 2.3.4 Patch PR

Closed 6 months ago 1 comment

build(deps): bump diesel from 2.3.3 to 2.3.4

MontyCoder0701/axum-starter #13

2.3.3 → 2.3.4 Patch PR

Closed 7 months ago 1 comment

Bump diesel from 2.3.3 to 2.3.4

trailofbits/necessist #1751

2.3.3 → 2.3.4 Patch PR

Closed 7 months ago 1 comment

Build(deps): Bump the cargo-deps group across 1 directory with 59 updates

rust-benchmark1/yew #28

2.2.12 → 2.3.4 Minor PR

Open 7 months ago 2 comments

build(deps): bump the cargo group across 1 directory with 22 updates

AerynOS/os-tools #623

2.3.1 → 2.3.4 Patch PR

Open 7 months ago 2 comments

chore(deps): bump diesel from 2.3.3 to 2.3.4

yammmt/last-date #357

2.3.3 → 2.3.4 Patch PR

Closed 7 months ago 2 comments

Build(deps): Bump the cargo-deps group across 1 directory with 58 updates

rust-benchmark1/yew #27

2.2.12 → 2.3.3 Minor PR

Closed 7 months ago 2 comments

Package Details

Name:	`diesel`
Ecosystem:	cargo
PURL Type:	cargo
Package URL:	`pkg:cargo/diesel`
JSON API:	View JSON

Security Advisories

5

Active advisories

CRITICAL 1

HIGH 2

MODERATE 2

View All cargo Advisories

Package Information

Description:

A safe, extensible ORM and Query Builder for PostgreSQL, SQLite, and MySQL

Repository:	https://github.com/diesel-rs/diesel
Homepage:	https://diesel.rs
Latest Release:	`2.2.10` about 1 year ago
Dependent Repos:	3,691
Dependent Packages:	416
Downloads:	15,753,144
Ranking:	Top 0.6417% by dependent repos Top 0.723% by downloads Top 0.2029% by dependent pkgs

PR Status

Open 84 (35.9%)

Merged 44 (18.8%)

Closed 102 (43.6%)

PR Types

Major 26 (11.1%)

Minor 31 (13.2%)

Patch 173 (73.9%)

diesel

Security Advisories

Diesel: Command injection in Diesel's implementation of `COPY FROM`/`COPY TO`

Diesel: Possible unaligned data access for implementations of `SqliteAggregate`

Diesel vulnerable to Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts

Diesel's SQLite backend has possible UTF-8 corruption

Fix a use-after-free bug in diesels Sqlite backend

Recent PRs

Package Details

Security Advisories

5

Package Information

PR Status

PR Types

`diesel`