{"action":"Upgrade serde_with to 3.21.0 or later.","affected":[{"fixed":"3.21.0","introduced":"2.3.0"}],"component":"serde_with","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["3.21.0"],"ghsa_id":"GHSA-7gcf-g7xr-8hxj","id":"tcs_01M5KEV8BJZYDEEP02P0YAZSJJ","modified_at":"2026-09-10T03:51:10.897685062Z","published_at":"2026-07-15T22:41:01Z","references":["https://osv.dev/vulnerability/GHSA-7gcf-g7xr-8hxj","https://github.com/jonasbb/serde_with/security/advisories/GHSA-7gcf-g7xr-8hxj","https://github.com/jonasbb/serde_with/pull/966","https://github.com/jonasbb/serde_with/commit/c8a1d820ea25df01692b367058d587343e199389","https://github.com/jonasbb/serde_with","https://github.com/jonasbb/serde_with/compare/v2.2.0...v2.3.0","https://github.com/jonasbb/serde_with/releases/tag/v3.21.0"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-7gcf-g7xr-8hxj","url":"https://osv.dev/vulnerability/GHSA-7gcf-g7xr-8hxj"}],"summary":"serde_with: KeyValueMap serialization panics on empty sequence or map entries"}