Description (CNA)
The serde-json-wasm crate before 1.0.1 for Rust allows stack consumption via deeply nested JSON data.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CosmWasm / serde-json-wasm | affected 0 before 0.5.2; affected 1.0.0 before 1.0.1 |
CWE
CWE-674
References
- https://rustsec.org/advisories/RUSTSEC-2024-0012.html
- https://github.com/advisories/GHSA-rr69-rxr6-8qwf
- https://crates.io/crates/serde-json-wasm
ADP enrichment
No English description supplied.
No references supplied.