Skip to content
OpenAdvisories

Package · crates.io

noyalib

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Unscored —
    GHSA-4xcc-23fx-w2wj

    Resource budgets not enforced on the typed deserialization path

    `ParserConfig::max_events`, `max_nodes`, `max_total_scalar_bytes`, `max_merge_keys`, `alias_anchor_ratio` and the alias jump factor were enforced only by the two `Value` loaders. A typed target with a default-shaped configuration is served by the streaming de…

    noyalib crates.io