PT-2021-24287

Name of the Vulnerable Software and Affected Versions: rusqlite versions 0.25.0 through 0.25.3 rusqlite versions 0.26.0 through 0.26.1 Description: The issue is related to several closure-accepting rusqlite functions having too relaxed lifetime bounds, which could allow Rust code to access object...

PT-2021-24292

Name of the Vulnerable Software and Affected Versions: rusqlite versions 0.25.0 through 0.25.3 rusqlite versions 0.26.0 through 0.26.1 Description: The issue exists in the rusqlite crate for Rust, where several closure-accepting functions have a too relaxed lifetime bound. This can allow Rust cod...

Remote Code Execution (RCE)

Microsoft Chakracore is vulnerable to remote code execution RCE. It does not properly handle the JIT bails out when there is an object marked as temporary during an implicit call, allowing objects stored on the stack to be used outside of the function during the DeadStore pass of GlobOpt...