Uncontrolled Resource Consumption ('Resource Exhaustion') Affecting alloy-json-abi package, versions *
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-RUST-ALLOYJSONABI-7689045
- published 16 Aug 2024
- disclosed 15 Aug 2024
- credit lcnz
How to fix?
Upgrade alloy-json-abi to version or higher.
Overview
Affected versions of this package are vulnerable to Uncontrolled Resource Consumption ('Resource Exhaustion') via the JsonAbi::parse method. An attacker can cause the application to crash by supplying specially crafted input.