Add unmaintained xml-rs (#1356)

This commit is contained in:
pinkforest(she/her)
2022-08-15 12:12:16 +10:00
committed by GitHub
parent fd7df6ae1c
commit 4e5153b854

View File

@@ -0,0 +1,23 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "xml-rs"
date = "2022-01-26"
url = "https://github.com/netvl/xml-rs/issues"
references = ["https://github.com/netvl/xml-rs/issues/219", "https://github.com/netvl/xml-rs/issues/210", "https://github.com/netvl/xml-rs/issues/204"]
informational = "unmaintained"
[versions]
patched = []
```
# xml-rs is Unmaintained
xml-rs is a XML parser has open issues around parsing including integer
overflows / panics that may or may not be an issue with untrusted data.
Together with these open issues with Unmaintained status xml-rs
may or may not be suited to parse untrusted data.
## Alternatives
- [quick-xml](https://crates.io/crates/quick-xml)