Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RUSTSEC-2022-0048: xml-rs is Unmaintained #226

Closed
github-actions bot opened this issue Aug 15, 2022 · 0 comments · Fixed by #229
Closed

RUSTSEC-2022-0048: xml-rs is Unmaintained #226

github-actions bot opened this issue Aug 15, 2022 · 0 comments · Fixed by #229
Assignees
Labels
k::dependencies Pull requests that update a dependency file rust Pull requests that update Rust code
Milestone

Comments

@github-actions
Copy link

xml-rs is Unmaintained

Details
Status unmaintained
Package xml-rs
Version 0.8.4
URL https://github.com/netvl/xml-rs/issues
Date 2022-01-26

xml-rs is a XML parser has open issues around parsing including integer
overflows / panics that may or may not be an issue with untrusted data.

Together with these open issues with Unmaintained status xml-rs
may or may not be suited to parse untrusted data.

Alternatives

See advisory page for additional details.

@tyranron tyranron added k::dependencies Pull requests that update a dependency file rust Pull requests that update Rust code labels Aug 15, 2022
@tyranron tyranron added this to the 0.14.0 milestone Aug 15, 2022
@tyranron tyranron modified the milestones: 0.14.0, 0.14.1 Sep 8, 2022
@tyranron tyranron linked a pull request Sep 12, 2022 that will close this issue
tyranron pushed a commit that referenced this issue Sep 12, 2022
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: ilslv <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
k::dependencies Pull requests that update a dependency file rust Pull requests that update Rust code
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants