Skip to content
OpenAdvisories

Package · crates.io

serde_cbor

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Unscored —
    RUSTSEC-2021-0127

    serde_cbor is unmaintained

    The `serde_cbor` crate is unmaintained. The author has archived the github repository. Alternatives proposed by the author: * [`ciborium`](https://crates.io/crates/ciborium) * [`minicbor`](https://crates.io/crates/minicbor)

    serde_cbor crates.io
  • High 7.5
    CVE-2019-25001

    Out of bounds write in serde_cbor

    An issue was discovered in the serde_cbor crate before 0.10.2 for Rust. The CBOR deserializer can cause stack consumption via nested semantic tags.

    serde_cbor rust-serde-cbor Ubuntu crates.io