Vulnerabilities

RUSTSEC-2022-0040

Multiple soundness issues in owning_ref

• OwningRef::map_with_owner is unsound and may result in a use-after-free.
• OwningRef::map is unsound and may result in a use-after-free.
• OwningRefMut::as_owner and OwningRefMut::as_owner_mut are unsound and may result in a use-after-free.
• The crate violates Rust's aliasing rules, which may cause miscompilations on recent compilers that emit the LLVM noalias attribute.

safer_owning_ref is a replacement crate which fixes these issues.
No patched versions of the original crate are available, and the maintainer is unresponsive.

Warnings

RUSTSEC-2023-0019

kuchiki is unmaintained

The kuchiki repo was marked as archived in this commit.

Possible Alternatives

Possible alternatives may include:

• kuchikiki
• html5ever
• xml-rs