RUSTSEC-2022-0048: xml-rs is Unmaintained
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 20/100
Research direction
Start with the linked RustSec advisory and inspect how listener-operator depends on xml-rs 0.8.4. Determine whether the unmaintained parser is used for untrusted data and document or implement a justified resolution, with the dependency no longer presenting this advisory as an unresolved concern.
Written by the indexing model from the issue text.
Description
xml-rs is Unmaintained
| Details | |
|---|---|
| Status | unmaintained |
| Package | xml-rs |
| Version | 0.8.4 |
| URL | https://github.com/netvl/xml-rs/issues |
| Date | 2022-01-26 |
xml-rs is a XML parser has open issues around parsing including integer
overflows / panics that may or may not be an issue with untrusted data.
Together with these open issues with Unmaintained status xml-rs
may or may not be suited to parse untrusted data.
Alternatives
See advisory page for additional details.
- Dominant language
- Python
- Stars
- 9
- Forks
- 2
- Avg merge
- 1d 9h
- Merged PRs (30d)
- 8
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from stackabletech/listener-operator
-
stackabletech/listener-operator#330 · 5 comments · 1 reaction · 1 assignee ·
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
-
customer-request
Difficulty 4/5 3-5 days Newbie friendliness 35/100
stackabletech/listener-operator#302 · 1 comment ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 20/100
-
Rename `listeners.stackable.tech/listener-class` PVC annotation to `listeners.stackable.tech/class` Open
Difficulty 3/5 1-2 days Newbie friendliness 43/100
stackabletech/listener-operator#271 · 1 comment ·
All issues in stackabletech/listener-operator
Similar issues
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
canonical/paas-charm#368 · 1 comment ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
tech debt
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
StevenBlack/hosts#3256 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
qualcomm/qai-appbuilder#275 ·