Skip to content
OpenAdvisories

Package · crates.io

stellar-xdr

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.0

    stellar-xdr: `StringM::from_str` bypasses max length validation

    stellar-xdr is a library and CLI containing types and functionality for working with Stellar XDR. Prior to version 25.0.1, StringM::from_str does not validate that the input length is within the declared maximum (MAX). Calling StringM::<N>::from_str(s) where …