{"id":"RUSTSEC-2022-0030","revision":"01cff1645ee44650945259eae97d3ea3","records":[{"revision":"01cff1645ee44650945259eae97d3ea3","observedAt":"2026-10-24T13:19:54.901+00:00","statement":{"source":"osv","id":"RUSTSEC-2022-0030","aliases":["CVE-2022-31099","GHSA-v78m-2q7v-fjqp"],"title":"Stack overflow during recursive expression parsing","description":"When parsing untrusted rulex expressions, the stack may overflow, possibly\nenabling a Denial of Service attack. This happens when parsing an expression\nwith several hundred levels of nesting, causing the process to abort\nimmediately.\n\nThe flaw was corrected in commits `60aa2dc03a` by adding a check to recursion\ndepth.","state":0,"publishedAt":"2022-05-21T12:00:00+00:00","modifiedAt":"2026-10-12T18:00:05.1193339+00:00","affected":[{"ecosystem":"crates.io","name":"rulex","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0.0.0-0"},{"kind":"fixed","version":"0.4.3"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://crates.io/crates/rulex","https://rustsec.org/advisories/RUSTSEC-2022-0030.html","https://github.com/rulex-rs/rulex/commit/60aa2dc03a22d69c8800fec81f99c96958a11363"],"sourceUrl":"https://osv.dev/vulnerability/RUSTSEC-2022-0030","license":"OSV · upstream source license applies","key":"osv:RUSTSEC-2022-0030","identifiers":["RUSTSEC-2022-0030","CVE-2022-31099","GHSA-v78m-2q7v-fjqp"]},"retained":false,"historicalAffected":[]}],"coverage":[]}