Dependency 'serde-avro' is unmaintained and has been deleted from its source repository #475
Comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
{{ message }}
The most recent version of
serde-avro, 0.5.0, triggers undefined behavior through an out-of-date linked_hash_map dependency.https://asan.saethlin.dev/ub?crate=serde-avro&version=0.5.0
Additionally, it has been deleted from its source repository in favor of other approaches: https://github.com/dflemstr/rq/tree/master/serde-avro
dflemstr/rq@72eeba9#diff-3e89b91b05cf00137bdadf274442f8ba1cbe498b02456a248809ac89e04ce4ad
The text was updated successfully, but these errors were encountered: