VDB
Sign up
MEDIUM

GHSA-255r-3prx-mf99

`rmp-serde` `Raw` and `RawRef` may crash when receiving invalid UTF-8

Details

It was found that `Raw::from_utf8` expects valid UTF-8. If invalid UTF-8 is received it can cause the process to crash.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/rmp-serde
Introduced in: 0Fixed in: 1.1.1

Upgrade rmp-serde to 1.1.1 or newer (ecosystem crates.io).

References