GHSA-2226-4v3c-cff8

Dashboard / Vulnerabilities / GHSA-2226-4v3c-cff8

GHSA-2226-4v3c-cff8

Summary: Stack overflow in rustc_serialize when parsing deeply nested JSON

Details: When parsing JSON using `json::Json::from_str`, there is no limit to the depth of the stack, therefore deeply nested objects can cause a stack overflow, which aborts the process. Example code that triggers the vulnerability is ```rust fn main() { let _ = rustc_serialize::json::Json::from_str(&"[0,[".repeat(10000)); } ``` [serde](https://crates.io/crates/serde) is recommended as a replacement to rustc_serialize.

References: https://github.com/rust-lang-deprecated/rustc-serialize, https://github.com/rust-lang/rustc-serialize, https://rustsec.org/advisories/RUSTSEC-2022-0004.html