Skip to content
OpenAdvisories

Package · crates.io

yara-x

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-2jx3-ff3v-j7jj

    yara-x: Unvalidated deserialization in safe `Rules::deserialize` allows memory corruption and UB

    > [!NOTE] > This finding was identified during an agentic unsafe Rust code review performed by Gemini AI, followed by human review and verification. ## The Issue The crate exports a public safe API [`Rules::deserialize`](https://github.com/VirusTotal/yara-x/b…

    yara-x crates.io