Files
advisory-db/crates/serde_yml/RUSTSEC-0000-0000.md
2025-09-12 09:10:27 +02:00

843 B

[advisory]
id = "RUSTSEC-0000-0000"
package = "serde_yml"
date = "2025-09-11"
url = "https://github.com/rustsec/advisory-db/issues/2395"
informational = "unmaintained"

[versions]
patched = []

serde_yml crate is unmaintained

The serde_yml crate is no longer actively maintained, after unsounded issues were raised. If you rely on this crate, it is highly recommended switching to a maintained alternative.

  • serde_norway - Maintained fork of serde_yaml, using unsafe-libyaml-norway
  • serde_yaml_ng - Maintained fork of serde_yaml, using unmaintained unsafe-libyaml

Incomplete alternatives