GHSA-8327-84cj-8xjm: Stack overflow when parsing specially crafted JSON ABI strings
Affected versions of the alloy-json-abi
crate did not properly handle parsing of malformatted JSON ABI strings. The JsonAbi::parse
method can be tricked into a stack overflow when processing specially crafted input.
This stack overflow can lead to a crash of the application using this crate, potentially causing a denial of service.
The flaw was corrected in commit 4790c47.
References
Detect and mitigate GHSA-8327-84cj-8xjm with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →