{"id":"RUSTSEC-2024-0320","aliases":[],"status":"published","title":"yaml-rust is unmaintained.","description":"The maintainer seems [unreachable](https://github.com/chyh1990/yaml-rust/issues/197).\n\nMany issues and pull requests have been submitted over the years\nwithout any [response](https://github.com/chyh1990/yaml-rust/issues/160).\n\n## Alternatives\n\nConsider switching to the actively maintained `yaml-rust2` fork of the original project:\n\n- [yaml-rust2](https://github.com/Ethiraric/yaml-rust2)\n- [yaml-rust2 @ crates.io](https://crates.io/crates/yaml-rust2)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2024-03-20T12:00:00Z","modified":"2024-11-01T12:31:51Z","affected":[{"source":"osv","ecosystem":"crates.io","package":"yaml-rust","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"}]}]}],"references":[{"url":"https://crates.io/crates/yaml-rust","tags":["package"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2024-0320.html","tags":["advisory"]},{"url":"https://github.com/rustsec/advisory-db/issues/1921","tags":["report"]}],"sources":{"osv":[{"id":"RUSTSEC-2024-0320","title":"yaml-rust is unmaintained.","description":"The maintainer seems [unreachable](https://github.com/chyh1990/yaml-rust/issues/197).\n\nMany issues and pull requests have been submitted over the years\nwithout any [response](https://github.com/chyh1990/yaml-rust/issues/160).\n\n## Alternatives\n\nConsider switching to the actively maintained `yaml-rust2` fork of the original project:\n\n- [yaml-rust2](https://github.com/Ethiraric/yaml-rust2)\n- [yaml-rust2 @ crates.io](https://crates.io/crates/yaml-rust2)","status":"published","published":"2024-03-20T12:00:00Z","modified":"2024-11-01T12:31:51Z","updated_at":"2026-11-02T15:53:39.971022Z"}]}}