When parsing untrusted, deeply nested JSON, the stack may overflow, possibly enabling a Denial of Service attack. This was fixed by adding a check for recursion depth.
This project contains known security vulnerabilities. Find detailed information at the bottom.
cosmwasm(4 total, 3 outdated, 1 insecure)
| Crate | Required | Latest | Status |
|---|---|---|---|
| schemars | ^0.5 | 1.2.2 | out of date |
| serde | ^1.0.103 | 1.0.229 | up to date |
| serde-json-wasm ⚠️ | ^0.1.2 | 1.0.1 | insecure |
| snafu | ^0.5.0 | 0.9.2 | out of date |
(1 total, all up-to-date)
| Crate | Required | Latest | Status |
|---|---|---|---|
| serde_json | ^1.0 | 1.0.151 | up to date |
serde-json-wasm: Stack overflow during recursive JSON parsingWhen parsing untrusted, deeply nested JSON, the stack may overflow, possibly enabling a Denial of Service attack. This was fixed by adding a check for recursion depth.