Vulnerability RUSTSEC-2024-0449
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 years ago
March 25, 2024 at 12:00 PM UTC
unsafe-libyaml is unmaintained
0.0.0 - 0.2.11
0.0.0 - 0.2.11
Summary
unsafe-libyaml is unmaintained
Details
The repository was archived by its owner on 2024-03-25 and is read-only. The last release is 0.2.11 (March 2024).
unsafe-libyaml is a machine translation of libyaml's C code into unsafe Rust (c2rust). Bugs found in it will not be fixed upstream. It is used by serde_yaml (itself deprecated) and by forks such as serde_yaml_ng.
Alternatives
Consider a YAML parser written in safe Rust, for example:
- saphyr (serde-saphyr for serde users)
- noyalib
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
2 years ago
unsafe-libyaml unaligned write of u64 on 32-bit and 16-bit platforms
0.0.0 - 0.2.9 GHSA-r24f-hg58-vfrw
0.0.0 - 0.2.9 GHSA-r24f-hg58-vfrw
Unknown
2 years ago
Unaligned write of u64 on 32-bit and 16-bit platforms
0.0.0 - 0.2.9 RUSTSEC-2023-0075
0.0.0 - 0.2.9 RUSTSEC-2023-0075
Impacted packages
Timeline
Published
2 years ago
March 25, 2024 at 12:00 PM UTC
Last Modified
1 hour ago
October 12, 2026 at 11:45 AM UTC