Skip to content

Replace yaml-rust with yaml-rust2 in order to not be affected by RUSTSEC-2024-0320 #537

@d3rpp

Description

@d3rpp

yaml-rust appears to be unmaintained, however, the community has published an actively maintained fork under the name of yaml-rust2, It is a drop in replacement.

Details on "Vulnerability" - RUSTSEC-2024-0320.

Assuming this isn't a duplicate (I could not find this being brought up before in this issues list), I will submit a PR dropping this in, it's a single line so assuming the developers of yaml-rust2 didn't change the API, shouldn't be an issue.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions