← Packages
rust-quick-xml-0.39
Rust crate "quick-xml"
- Current
- 0.39.4
- Candidate
- Stale
- Release line
- 0.39.x
- License
- MIT
Advisory · 2
Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.
- Summary
- Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of serviceOSV
- Fixed events
- 0.41.0OSV
- Aliases
- —OSV
- EPSS (no CVE alias)
- not applicableFIRST
- KEV (no CVE alias)
- not applicableCISA
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HOSV
- References
- Advisory · rustsec.orgWeb · 7ca25266e949
Description
Source code for takopackized Rust crate "quick-xml"
Changelog
PR · 2
Checks
| Monitor | Observation | Last checked |
|---|---|---|
Stale Repository refresh: git fetch exited 128 (authentication) | ||
Stale Source last confirmed at 2026-11-12T03:33:01+00:00; repository refresh overdue. | ||
Checked | ||
Checked | ||
Not configured No reliable monitor identity/configuration. | — | |
Not applicable No confirmed version upgrade; this monitor is not run. | — | |
Checked | Last attempted | |
Checked Current source component only; local patches, build options, bundled dependencies and binary artifacts are not evaluated. | ||
Checked | Last attempted |