Lucene search
+L

8 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2025-29250

Malicious code in bioql PyPI...

6.6AI score
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2025/09/15 1:58 p.m.•5 views

better-config-loader (>=0.1.4, <=0.2.4), blazen (>=0.1.93, <=0.1.151) +102 more potentially affected by unknown CVE via serde_yml (>=0.0.7, <=0.0.12)

serdeyml CARGO version =0.0.7, =0.1.4, =0.1.93, =0.1.131, =0.2.0, =0.33.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.14.0, =0.14.0, =0.3.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-HHW4-XG65-FP2X...

5.8AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2025/09/15 1:58 p.m.•21 views

serde_yml crate is unsound and unmaintained

Using serdeyml::ser::Serializer.emitter can cause a segmentation fault, which is unsound. The GitHub project for serdeyml was archived after unsoundness issues were raised. If you rely on this crate, it is highly recommended switching to a maintained alternative. Recommended alternatives -...

7AI score
SaveExploits0References3Affected Software1
OSV
OSV
•added 2025/09/15 1:58 p.m.•15 views

GHSA-HHW4-XG65-FP2X serde_yml crate is unsound and unmaintained

Using serdeyml::ser::Serializer.emitter can cause a segmentation fault, which is unsound. The GitHub project for serdeyml was archived after unsoundness issues were raised. If you rely on this crate, it is highly recommended switching to a maintained alternative. Recommended alternatives -...

6.9CVSS5.9AI score
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2025/09/11 12:00 p.m.•7 views

better-config-loader (>=0.1.4, <=0.2.4), blazen (>=0.1.93, <=0.1.151) +102 more potentially affected by unknown CVE via serde_yml (>=0.0.7, <=0.0.13)

serdeyml CARGO version =0.0.7, =0.1.4, =0.1.93, =0.1.131, =0.2.0, =0.33.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.14.0, =0.14.0, =0.3.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0068...

5.8AI score
SaveExploits0
RustSec
RustSec
•added 2025/09/11 12:00 p.m.•41 views

serde_yml crate is unsound and unmaintained

Using serdeyml::ser::Serializer.emitter can cause a segmentation fault, which is unsound. The GitHub project for serdeyml was archived after unsoundness issues were raised. If you rely on this crate, it is highly recommended switching to a maintained alternative. Recommended alternatives -...

7AI score
SaveExploits0
OSV
OSV
•added 2025/09/11 12:00 p.m.•36 views

RUSTSEC-2025-0068 serde_yml crate is unsound and unmaintained

Using serdeyml::ser::Serializer.emitter can cause a segmentation fault, which is unsound. The GitHub project for serdeyml was archived after unsoundness issues were raised. If you rely on this crate, it is highly recommended switching to a maintained alternative. Recommended alternatives -...

7AI score
SaveExploits0References3
GithubExploit
GithubExploit
•added 2024/05/26 12:57 p.m.•10 views

serde_yml

serdeyml Deprecated YAML library for Rust. The 0.0.13 relea...

6.1AI score
SaveExploits0
Rows per page
Query Builder