RUSTSEC-2025-0067

See a problem?
Please try reporting it to the source first.

Source

https://rustsec.org/advisories/RUSTSEC-2025-0067

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/RUSTSEC-2025-0067

Published

2025-09-11T12:00:00Z

Modified

2025-09-12T07:28:19Z

Summary

`libyml::string::yaml_string_extend` is unsound and unmaintained

Details

In version 0.0.4, libyml::string::yaml_string_extend was revised resulting in undefined behaviour, which is unsound.

The GitHub project for libyml was archived after unsoundness issues were raised.

If you rely on this crate, it is highly recommended switching to a maintained alternative.

Recommended alternatives

Database specific

{
    "license": "CC0-1.0"
}

References

{
    "affected_functions": null,
    "affects": {
        "os": [],
        "functions": [],
        "arch": []
    }
}

{
    "informational": "unsound",
    "categories": [],
    "cvss": null
}