1 result · Feed
-
Medium —
serde_with: KeyValueMap serialization panics on empty sequence or map entries
### Summary The public `KeyValueMap` serializer assumes that each mapped element has at least one field or item to use as the map key, but it subtracts `1` from the caller-visible length before validating that assumption. An application that serializes attack…