Skip to content

Dependency 'serde-avro' is unmaintained and has been deleted from its source repository #475

@riking

Description

@riking

The most recent version of serde-avro, 0.5.0, triggers undefined behavior through an out-of-date linked_hash_map dependency.

https://asan.saethlin.dev/ub?crate=serde-avro&version=0.5.0

Additionally, it has been deleted from its source repository in favor of other approaches: https://github.com/dflemstr/rq/tree/master/serde-avro
dflemstr/rq@72eeba9#diff-3e89b91b05cf00137bdadf274442f8ba1cbe498b02456a248809ac89e04ce4ad

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions