VYPR

crates.io package

serde_cbor

pkg:cargo/serde_cbor

Vulnerabilities (1)

  • CVE-2019-25001Dec 31, 2020
    affected < 0.10.2fixed 0.10.2

    An issue was discovered in the serde_cbor crate before 0.10.2 for Rust. The CBOR deserializer can cause stack consumption via nested semantic tags.