PT-2022-37420 · Xml-Rs · Xml-Rs

Published 2022-01-26 · Updated 2022-01-26

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions xml-rs (affected versions not specified)

Description The issue concerns xml-rs, a XML parser, which has open issues related to parsing, including integer overflows and panics. These issues may pose a problem when handling untrusted data. The status of these issues is marked as unmaintained, which could imply that xml-rs may not be suitable for parsing untrusted data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

RUSTSEC-2022-0048

Affected Products

Xml-Rs

References · 7

• https://osv.dev/vulnerability/RUSTSEC-2022-0048 · Vendor Advisory
• https://github.com/netvl/xml-rs/issues/219 · Note
• https://github.com/netvl/xml-rs/issues/204 · Note
• https://github.com/netvl/xml-rs/issues · Note
• https://github.com/netvl/xml-rs/issues/210 · Note
• https://crates.io/crates/xml-rs · Note
• https://rustsec.org/advisories/RUSTSEC-2022-0048.html · Note