crates.io/yara-x: medium

yara-x: Unvalidated deserialization in safe `Rules::deserialize` allows memory corruption and UB

Action: Upgrade yara-x to 1.19.0 or later.

cargo update -p yara-x --precise 1.19.0

Affected

Fixed versions

Sources

• osv: GHSA-2jx3-ff3v-j7jj
• https://github.com/VirusTotal/yara-x/security/advisories/GHSA-2jx3-ff3v-j7jj
• https://github.com/VirusTotal/yara-x/commit/25efa375572efcfbe880a263ee3b0932d4b61a24
• https://github.com/VirusTotal/yara-x
• https://github.com/VirusTotal/yara-x/releases/tag/v1.19.0

published 2026-09-24T19:09:28Z · modified 2026-09-24T19:15:05.684638950Z · JSON