The most recent version of serde-avro, 0.5.0, triggers undefined behavior through an out-of-date linked_hash_map dependency.
https://asan.saethlin.dev/ub?crate=serde-avro&version=0.5.0
Additionally, it has been deleted from its source repository in favor of other approaches: https://github.com/dflemstr/rq/tree/master/serde-avro
dflemstr/rq@72eeba9#diff-3e89b91b05cf00137bdadf274442f8ba1cbe498b02456a248809ac89e04ce4ad