search

w4 / bin

:wastebasket: a paste bin.
Other
441 stars 45 forks source link

RUSTSEC-2022-0048: xml-rs is Unmaintained #36

Open github-actions[bot] opened 2 years ago

github-actions[bot] commented 2 years ago

xml-rs is Unmaintained

Details
Status unmaintained
Package xml-rs
Version 0.8.4
URL https://github.com/netvl/xml-rs/issues
Date 2022-01-26

xml-rs is a XML parser has open issues around parsing including integer overflows / panics that may or may not be an issue with untrusted data.

Together with these open issues with Unmaintained status xml-rs may or may not be suited to parse untrusted data.

Alternatives

See advisory page for additional details.