Medium GHSA-255r-3prx-mf99 RUSTSEC-2022-0092

`rmp-serde` `Raw` and `RawRef` may crash when receiving invalid UTF-8

Published Mar 22, 2023 · Updated Sep 10, 2026 · Assigned by GHSA

Description

It was found that `Raw::from_utf8` expects valid UTF-8. If invalid UTF-8 is received it can cause the process to crash.

Ecosystem	Package	Affected	Fixed	Record
crates.io	rmp-serde	< 1.1.1	1.1.1	GHSA-255r-3prx-mf99
crates.io	rmp-serde	>= 0.0.0-0, < 1.1.1	1.1.1	RUSTSEC-2022-0092