crates.io/quick-xml: high 7.5
Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service
Action: Upgrade quick-xml to 0.41.0 or later.
cargo update -p quick-xml --precise 0.41.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.41.0 | - |
Fixed versions
| 0.41.0 |
Sources
- osv: RUSTSEC-2026-0195
- https://crates.io/crates/quick-xml
- https://rustsec.org/advisories/RUSTSEC-2026-0195.html
- https://github.com/tafia/quick-xml/issues/970
- https://github.com/tafia/quick-xml/commit/7ca25266e94987210daa864889ab15c9332c8a2a
published · modified · JSON