PT-2025-38664 · Crates.Io · Libyaml

Publicado 2025-09-11 · Atualizado 2025-09-11

OSV

In version 0.0.4, libyml::string::yaml string extend was revised resulting in undefined behaviour, which is unsound.

The GitHub project for libyml was archived after unsoundness issues were raised.

If you rely on this crate, it is highly recommended switching to a maintained alternative.

Recommended alternatives

• libyaml-safer
• unsafe-libyaml-norway - Maintained fork of unsafe-libyaml

Identificadores relacionados

RUSTSEC-2025-0067

Produtos afetados

Libyaml

Referências · 4

• https://github.com/rustsec/advisory-db/issues/2395 · Nota
• https://rustsec.org/advisories/RUSTSEC-2025-0067.html · Nota
• https://crates.io/crates/libyml · Nota
• https://osv.dev/vulnerability/RUSTSEC-2025-0067 · Aviso do Fabricante