serde-json-wasm Stack Overflow Vulnerability Allowing Denial-of-Service

A stack overflow vulnerability has been identified in the serde-json-wasm crate for Rust, specifically in versions prior to 1.0.1. This vulnerability arises when the crate parses untrusted, deeply nested JSON data, leading to excessive stack consumption. Such behavior can potentially be exploited to cause a denial-of-service condition.

Impact

Exploitation of this vulnerability can lead to a stack overflow, causing a denial-of-service condition by exhausting the call stack and potentially crashing the application.

Remediation

Users can upgrade to serde-json-wasm version 1.0.1 or version 0.5.2 to address this vulnerability.