GitHub Advisoryadvisory · crates.io

GHSA-255r-3prx-mf99 `rmp-serde` `Raw` and `RawRef` may crash when receiving invalid UTF-8

MEDIUM Published 2023-03-22 Modified 2023-03-22 Official page ↗

Ecosystem: crates.io
Packages: rmp-serde
Severity: Moderate
Reviewed: 2023-03-22

Affected packages

• crates.io rmp-serde: < 1.1.1 → fixed in 1.1.1

Description

It was found that `Raw::from_utf8` expects valid UTF-8. If invalid UTF-8 is received it can cause the process to crash.

References