The diesel-async Rust crate has a vulnerability where uninitialized stack padding bytes are exposed when reading MySQL temporal columns (DATE, TIME, DATETIME, TIMESTAMP). This leads to undefined behavior and potential leakage of stale memory contents. The issue arises from unsafe code that constructs a MysqlTime struct without initializing padding bytes, which then become accessible in safe code. A fix is available in version 0.9.0.