crates.io/libyml: high
LibYML: `libyml::string::yaml_string_extend` is unsound and unmaintained
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.4 | - | 0.0.5 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-gfxp-f68g-8x78
- https://github.com/rustsec/advisory-db/issues/2395
- https://github.com/sebastienrousseau/libyml
- https://rustsec.org/advisories/RUSTSEC-2025-0067.html
published · modified · JSON