RustSec logo

History ⋅ Edit ⋅ JSON (OSV)

RUSTSEC-2024-0449

unsafe-libyaml is unmaintained

Reported
Issued
Package
unsafe-libyaml (crates.io)
Type
INFO Unmaintained
References
Patched
no patched versions

Description

The repository was archived by its owner on 2024-03-25 and is read-only. The last release is 0.2.11 (March 2024).

unsafe-libyaml is a machine translation of libyaml's C code into unsafe Rust (c2rust). Bugs found in it will not be fixed upstream. It is used by serde_yaml (itself deprecated) and by forks such as serde_yaml_ng.

Alternatives

Consider a YAML parser written in safe Rust, for example:

Advisory available under CC0-1.0 license.