Serialization - GoKawiil

Armin Ronacher unveils Deser, a new Rust serialization library challenging Serde

Developer Armin Ronacher has published a project called Deser, aiming to address longstanding limitations in Rust's dominant Serde serialization library. He details specific bugs and edge cases in Serde, including failures when combining internally tagged enums with arbitrary-precision numbers, broken integer key handling under field flattening, and deserializer adapters that don't compose properly.

lucumr.pocoo.org · 2026-09-29

Critical flaw in GiveWP WordPress plugin enables remote code execution

Security researchers disclosed CVE-2026-82222, a maximum-severity vulnerability in the GiveWP donation plugin affecting versions through 4.16.7.1. By chaining an unauthenticated registration bypass, an insecure PHP unserialize function, and a gadget chain in bundled libraries, attackers can create an account, plant a malicious object in the plugin's session data, and trigger arbitrary command execution on the server by simply loading a front-end page.

bleepingcomputer.com · 2026-08-28