Skip to content
OpenAdvisories
Low · 3.2 CVE-2024-58264 EUVD-2024-54825GHSA-rr69-rxr6-8qwfRUSTSEC-2024-0012

serde-json-wasm stack overflow during recursive JSON parsing

Published Jul 27, 2025 · Updated Jul 28, 2025 · Assigned by mitre

Vendor: CosmWasm Product: serde-json-wasm Package: serde-json-wasm Ecosystem: crates.io

Description

The serde-json-wasm crate before 1.0.1 for Rust allows stack consumption via deeply nested JSON data.

Affected products

VendorProductAffectedFixed
CosmWasm serde-json-wasm < 0.5.2, 1.0.0 – < 1.0.1 0.5.2

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io serde-json-wasm >= 1.0.0, < 1.0.1 1.0.1 GHSA-rr69-rxr6-8qwf
crates.io serde-json-wasm < 0.5.2 0.5.2 GHSA-rr69-rxr6-8qwf
crates.io serde-json-wasm >= 0.0.0-0, < 0.5.2 · >= 1.0.0, < 1.0.1 0.5.2, 1.0.1 RUSTSEC-2024-0012

References