Skip to content

Add advisory for pest_grammars - #3375

Merged
djc merged 2 commits into
rustsec:mainfrom
tomtau:pest-grammars
Oct 16, 2026
Merged

djc merged 2 commits into
rustsec:mainfrom
tomtau:pest-grammars

Conversation

@tomtau

@tomtau tomtau commented Oct 16, 2026

Copy link
Copy Markdown
Contributor

Affected crate(s)

  • pest_grammars (1,917 recent downloads per crates.io)

Links to upstream issue(s) or PR(s)

GHSA-7632-4q2x-hvjw
pest-parser/pest#1212

Severity

allows denial-of-service with untrusted input via stack exhaustion (if one did not set pest::set_call_limit())

Checklist

  • Advisory filename(s) starts with RUSTSEC-0000-0000 as the ID
  • date field is set to the public disclosure date
  • Contains a concise and descriptive title after advisory metadata
  • Asked maintainer(s) if publishing an advisory is appropriate

@djc djc left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for reporting.

@djc
djc merged commit 28fd476 into rustsec:main Oct 16, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants