-
Notifications
You must be signed in to change notification settings - Fork 285
All issues
Issue creation is restricted in this repository
- #158 · cmyr opened
on May 17, 2019 19 - #218 · Richterrettich opened
on Jun 22, 2020 17 - #269 · dralley opened
on Mar 1, 2021 4
Issues
is:issue state:open
is:issue state:open
Search results
NamespaceResolver::resolve_prefix linearly scans the entire binding stack per lookup — O(depth²) CPU DoS on deeply nested XML (sibling of RUSTSEC-2026-0194)
namespacesIssues related to namespaces supportIssues related to namespaces supportoptimizationIssues related to reducing time needed to parse XML or to memory consumptionIssues related to reducing time needed to parse XML or to memory consumptionStatus: Open.#980 In tafia/quick-xml;serde Deserializer has no recursion-depth limit → stack-overflow DoS on deeply nested untrusted XML (distinct from #819)
serdeIssues related to mapping from Rust types to XMLIssues related to mapping from Rust types to XMLStatus: Open.#978 In tafia/quick-xml;overlapped-listsfeature causes parser errors toxsi:nilfields after array fieldsarraysIssues related to mapping XML content onto arrays using serdeIssues related to mapping XML content onto arrays using serdeserdeIssues related to mapping from Rust types to XMLIssues related to mapping from Rust types to XMLStatus: Open.#953 In tafia/quick-xml;- Status: Open.#945 In tafia/quick-xml;
impl_deserialize_for_internally_tagged_enum panic on deserialize when inner element is itself an enum
serdeIssues related to mapping from Rust types to XMLIssues related to mapping from Rust types to XMLStatus: Open.#928 In tafia/quick-xml;- Status: Open.#927 In tafia/quick-xml;
struct-based list can be serde-serialized as child but not as attribute
arraysIssues related to mapping XML content onto arrays using serdeIssues related to mapping XML content onto arrays using serdeserdeIssues related to mapping from Rust types to XMLIssues related to mapping from Rust types to XMLStatus: Open.#906 In tafia/quick-xml;Whitespaces around character entities
serdeIssues related to mapping from Rust types to XMLIssues related to mapping from Rust types to XMLStatus: Open.#900 In tafia/quick-xml;Lingering serde whitespace bug
serdeIssues related to mapping from Rust types to XMLIssues related to mapping from Rust types to XMLStatus: Open.#896 In tafia/quick-xml;- Status: Open.#890 In tafia/quick-xml;
Add ability to serialize Serde types to quick_xml::writer::Writer
serdeIssues related to mapping from Rust types to XMLIssues related to mapping from Rust types to XMLStatus: Open.#886 In tafia/quick-xml;Problem with
overlapped-liststhat is enabled by the dependencyserdeIssues related to mapping from Rust types to XMLIssues related to mapping from Rust types to XMLStatus: Open.#885 In tafia/quick-xml;