Rust advisories / crate
Security history · serde_cbor · data from Oct 24, 2026
Is serde_cbor safe to use? Its security history
VerdictUnmaintained. RustSec marked serde_cbor unmaintained (RUSTSEC-2021-0127), so new security bugs will not be fixed.
2advisories on record
1vulnerabilities
1unmaintained notices
0.10.2newest fixed version
Every advisory, newest first
- UnmaintainedRUSTSEC-2021-0127 · 2021-08-15serde_cbor is unmaintained
- Vulnerability HighRUSTSEC-2019-0025 · 2019-10-03Flaw in CBOR deserializer allows stack overflow
Check your version
Run cargo tree -i serde_cbor to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Are you affected?Check your whole dependency treeRead it next →Also worth your time
Did this answer your question?