Skip to content
OpenAdvisories

Package · crates.io

serde_with

1 known vulnerabilities.

1 result · Feed

  • Medium —

    serde_with: KeyValueMap serialization panics on empty sequence or map entries

    ### Summary The public `KeyValueMap` serializer assumes that each mapped element has at least one field or item to use as the map key, but it subtracts `1` from the caller-visible length before validating that assumption. An application that serializes attack…