diff --git a/crates/serde-json-wasm/RUSTSEC-0000-0000.md b/crates/serde-json-wasm/RUSTSEC-0000-0000.md new file mode 100644 index 0000000..a03b792 --- /dev/null +++ b/crates/serde-json-wasm/RUSTSEC-0000-0000.md @@ -0,0 +1,17 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "serde-json-wasm" +date = "2024-01-24" +categories = ["denial-of-service"] +keywords = ["stack-overflow", "json"] + +[versions] +patched = [">= 1.0.1", ">= 0.5.2, < 1.0.0"] +``` + +# Stack overflow during recursive JSON parsing + +When parsing untrusted, deeply nested JSON, the stack may overflow, +possibly enabling a Denial of Service attack. +This was fixed by adding a check for recursion depth.