Haskell Weekly

Hash Flooding Aeson

Informações:

Sinopsis

Special guest Tom Sydney Kerckhove talks with Taylor Fausak about a denial of service vulnerability in Aeson, a Haskell library for JSON. https://cs-syd.eu/posts/2021-09-11-json-vulnerability https://hackage.haskell.org/package/sydtest-0.4.0.0 https://hackage.haskell.org/package/genvalidity-0.11.0.2 https://hackage.haskell.org/package/yamlparse-applicative-0.2.0.0