https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 08 Nov 2026 16:04:26 +0000 https://db.gcve.eu/vuln/rustsec-2025-0068 <p><strong>Affected:</strong> crates.io: serde_yml</p> <p>Using `serde_yml::ser::Serializer.emitter` can cause a segmentation fault, which is unsound.</p> <p>The GitHub project for `serde_yml` was archived after unsoundness issues were raised.</p> <p>If you rely on this crate, it is highly recommended switching to a maintained alternative.</p> <p>## Recommended alternatives</p> <p>- [`serde_norway`](https://crates.io/crates/serde_norway) - Maintained fork of `serde_yaml`, using `unsafe-libyaml-norway` - [`serde_yaml_ng`](https://crates.io/crates/serde_yaml_ng) - Maintained fork of `serde_yaml`, using unmaintained `unsafe-libyaml`</p> <p>## Incomplete pure Rust alternatives</p> <p>These implementation do not rely on C `libyaml`.</p> <p>- [`serde_yaml2`](https://crates.io/crates/serde_yaml2) - [`yaml-peg`](https://crates.io/crates/yaml-peg)</p> <p><strong>Affected:</strong> crates.io: serde_yml</p> <p>Using `serde_yml::ser::Serializer.emitter` can cause a segmentation fault, which is unsound.</p> <p>The GitHub project for `serde_yml` was archived after unsoundness issues were raised.</p> <p>If you rely on this crate, it is highly recommended switching to a maintained alternative.</p> <p>## Recommended alternatives</p> <p>- [`serde_norway`](https://crates.io/crates/serde_norway) - Maintained fork of `serde_yaml`, using `unsafe-libyaml-norway` - [`serde_yaml_ng`](https://crates.io/crates/serde_yaml_ng) - Maintained fork of `serde_yaml`, using unmaintained `unsafe-libyaml`</p> <p>## Incomplete pure Rust alternatives</p> <p>These implementation do not rely on C `libyaml`.</p> <p>- [`serde_yaml2`](https://crates.io/crates/serde_yaml2) - [`yaml-peg`](https://crates.io/crates/yaml-peg)</p> https://db.gcve.eu/vuln/rustsec-2025-0068