Rust advisories / crate
Security history · quick-xml · data from Oct 24, 2026
Is quick-xml safe to use? Its security history
VerdictNo open advisories. 2 past vulnerabilities were fixed; use 0.41.0 or newer to be clear of all of them.
2advisories on record
2vulnerabilities
0unmaintained notices
0.41.0newest fixed version
Every advisory, newest first
- Vulnerability HighRUSTSEC-2026-0194 · 2026-06-29Quadratic run time when checking a start tag for duplicate attribute names
- Vulnerability HighRUSTSEC-2026-0195 · 2026-06-29Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service
Check your version
Run cargo tree -i quick-xml to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
Download trends, dependents and alternatives: quick-xml crate data.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Before you depend on itquick-xml crate dataReal downloads, dependents and alternatives.Read it next →Did this answer your question?