GHSA-7GCF-G7XR-8HXJ serde_with: KeyValueMap serialization panics on empty sequence or map entries

Summary The public KeyValueMap serializer assumes that each mapped element has at least one field or item to use as the map key, but it subtracts 1 from the caller-visible length before validating that assumption. An application that serializes attacker-controlled data through serdeasas =...

CVE-2026-11312

A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purgekvmap in the library /src/infinistore.h of the component KV Map Handler. Performing a manipulation results in inefficient algorithmic complexity. The attack requires a local approach. The...

CVE-2026-11312 bytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexity

A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purgekvmap in the library /src/infinistore.h of the component KV Map Handler. Performing a manipulation results in inefficient algorithmic complexity. The attack requires a local approach. The...

[SECURITY] Fedora 41 Update: rust-litemap-0.7.3-5.fc41

A key-value Map implementation based on a flat, sorted Vec...

[SECURITY] Fedora 40 Update: rust-litemap-0.7.3-5.fc40

A key-value Map implementation based on a flat, sorted Vec...

[SECURITY] Fedora 42 Update: rust-litemap-0.7.3-5.fc42

A key-value Map implementation based on a flat, sorted Vec...