photocraft/crates/format
Michael Higgins b24c0360f1
Dependencies: require ruzstd 0.9.1 for RUSTSEC-2026-0344 (#4952) (#5225)
ruzstd before 0.9.1 lets a crafted zstd input under 128 KB allocate
several gigabytes at once. PhotoCraft decodes zstd when it opens .pcraft
and Affinity files, so such a file could end the process with an
out-of-memory abort.

Raise the minimum in both crates that use it and update the lockfile
from 0.9.0 to 0.9.1.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-15 13:37:56 -06:00
..
fuzz Fuzz: ignore the same build leftovers in every fuzz crate (#3585) 2026-10-12 10:19:06 -04:00
src fix(doc): variable definitions follow layer id remapping on copy and load (#5023) 2026-10-14 15:02:43 -07:00
tests fix(doc): variable definitions follow layer id remapping on copy and load (#5023) 2026-10-14 15:02:43 -07:00
Cargo.toml Dependencies: require ruzstd 0.9.1 for RUSTSEC-2026-0344 (#4952) (#5225) 2026-10-15 13:37:56 -06:00