Repository navigation
Missing quick-xml RustSec advisories #10374
Unanswered
FaeyUmbrea
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Could you check the import status of RUSTSEC-2026-0194 and RUSTSEC-2026-0195?
RustSec assigned both IDs on 2 July 2026. OSV serves both records, covering quick-xml versions below 0.41.0.
On 15 October, GitHub’s advisory API returns no quick-xml records in either the reviewed or unreviewed category. Dependency graphs detect the package, but Dependabot has no corresponding advisory to match.
Are these pending review, rejected, or missing because of an import problem? Can they be imported?
All reactions