```toml [advisory] id = "RUSTSEC-2024-0362" package = "alloy-json-abi" date = "2024-07-30" url = "https://github.com/alloy-rs/core/issues/702" keywords = ["stack-overflow"] aliases = ["GHSA-8327-84cj-8xjm"] [versions] patched = [">= 0.7.7"] ``` # Stack overflow when parsing specially crafted JSON ABI strings Affected versions of the `alloy-json-abi` crate did not properly handle parsing of malformatted JSON ABI strings. The `JsonAbi::parse` method can be tricked into a stack overflow when processing specially crafted input. This stack overflow can lead to a crash of the application using this crate, potentially causing a denial of service. The flaw was corrected in commit 4790c47.