search

tauri-apps / tauri-invoke-http

A custom invoke system for Tauri that leverages a localhost server
Apache License 2.0
48 stars 5 forks source link

RUSTSEC-2022-0048: xml-rs is Unmaintained #8

Open github-actions[bot] opened 1 year ago

github-actions[bot] commented 1 year ago

xml-rs is Unmaintained

Details
Status unmaintained
Package xml-rs
Version 0.8.4
URL https://github.com/netvl/xml-rs/issues
Date 2022-01-26

xml-rs is a XML parser has open issues around parsing including integer overflows / panics that may or may not be an issue with untrusted data.

Together with these open issues with Unmaintained status xml-rs may or may not be suited to parse untrusted data.

Alternatives

See advisory page for additional details.