Bram-Hub / aris

Aris: a logic engine/formal proof interface; 3nd generation, successor to the Java version of Aris.
https://aris.bram-hub.com
GNU General Public License v3.0
10 stars 2 forks source link

RUSTSEC-2022-0048: xml-rs is Unmaintained #103

Open github-actions[bot] opened 1 year ago

github-actions[bot] commented 1 year ago

xml-rs is Unmaintained

Details
Status unmaintained
Package xml-rs
Version 0.8.4
URL https://github.com/netvl/xml-rs/issues
Date 2022-01-26

xml-rs is a XML parser has open issues around parsing including integer overflows / panics that may or may not be an issue with untrusted data.

Together with these open issues with Unmaintained status xml-rs may or may not be suited to parse untrusted data.

Alternatives

See advisory page for additional details.