advisory-db/crates/json/RUSTSEC-2022-0081.md

[advisory]
id = "RUSTSEC-2022-0081"
package = "json"
date = "2022-02-01"
url = "https://github.com/maciejhirsz/json-rust/issues/205"
references = ["https://github.com/maciejhirsz/json-rust/issues/196"]
informational = "unmaintained"

[versions]
patched = []

json is unmaintained

Last release was almost 3 years ago.

The maintainer is unresponsive with outstanding issues.

One of the outstanding issues include a possible soundness issue.

Possible Alternative(s)

The below list has not been vetted in any way and may or may not contain alternatives;

• jzon maintained fork of json
• serde_json
• json-deserializer
• simd-json