RUSTSEC-2024-0320
yaml-rust is unmaintained.
No score
The maintainer seems unreachable.
Many issues and pull requests have been submitted over the years without any response.
Alternatives
Consider switching to the actively maintained yaml-rust2 fork of the original project:
What each source reports
OSV No score
yaml-rust is unmaintained.
The maintainer seems unreachable.
Many issues and pull requests have been submitted over the years without any response.
Alternatives
Consider switching to the actively maintained yaml-rust2 fork of the original project:
- Record
RUSTSEC-2024-0320- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
yaml-rustcrates.io |
0.0.0-0 and later | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RUSTSEC-2024-0320 is a vulnerability with no CVSS score yet in yaml-rust, published March 20, 2024. No source lists public exploit code. No source names a fixed version.