Skip to content

Dependency 'serde-avro' is unmaintained and has been deleted from its source repository #475

@riking

Description

@riking

The most recent version of serde-avro, 0.5.0, triggers undefined behavior through an out-of-date linked_hash_map dependency.

https://asan.saethlin.dev/ub?crate=serde-avro&version=0.5.0

Additionally, it has been deleted from its source repository in favor of other approaches: https://github.com/dflemstr/rq/tree/master/serde-avro
dflemstr/rq@72eeba9#diff-3e89b91b05cf00137bdadf274442f8ba1cbe498b02456a248809ac89e04ce4ad

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions