https://cve.radiocsirt.org/rss/recent/osv_rustsec/10 Most recent entries from osv_rustsec 2026-10-02T08:50:14.080819+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/rustsec-2016-0004 RUSTSEC-2016-0004 — libusb is unmaintained; use rusb instead 2020-10-02T01:29:11+00:00

Affected: crates.io: libusb

The `libusb` crate has not seen a release since September 2016, and its author is unresponsive.

The `rusb` crate is a maintained fork:

https://github.com/a1ien/rusb

 2016-09-10T12:00:00+00:00 https://cve.radiocsirt.org/vuln/rustsec-2016-0006 RUSTSEC-2016-0006 — `cassandra` crate is unmaintained; use `cassandra-cpp` instead 2020-10-02T01:29:11+00:00

Affected: crates.io: cassandra

The `cassandra` crate has not seen a release since December 2016, and its author is unresponsive.

The `cassandra-cpp` crate is a maintained fork:

https://github.com/Metaswitch/cassandra-rs

 2016-12-15T12:00:00+00:00 https://cve.radiocsirt.org/vuln/rustsec-2017-0007 RUSTSEC-2017-0007 — lz4-compress is unmaintained 2020-10-02T01:29:11+00:00

Affected: crates.io: lz4-compress

[According to the developers](https://gitlab.redox-os.org/redox-os/tfs/issues/89) this crate is no longer maintained.

The suggested alternative is [`lz4-compression`](https://crates.io/crates/lz4-compression), a maintained fork of `lz4-compress`.

See also [lz-fear](https://crates.io/crates/lz-fear) which is compatible with the reference LZ4 implementation in C, but not with lz4-compress.

 2017-04-17T12:00:00+00:00 https://cve.radiocsirt.org/vuln/rustsec-2018-0014 RUSTSEC-2018-0014 — chan is end-of-life; use crossbeam-channel instead 2020-10-02T01:29:11+00:00

Affected: crates.io: chan

**`chan` has reached its end-of-life and is now deprecated.**

The intended successor of this crate is [`crossbeam-channel`](https://github.com/crossbeam-rs/crossbeam/tree/master/crossbeam-channel). Its API is strikingly similar, but comes with a much better `select!` macro, better performance, a better test suite and an all-around better implementation.

 2018-07-31T12:00:00+00:00 https://cve.radiocsirt.org/vuln/rustsec-2018-0015 RUSTSEC-2018-0015 — term is looking for a new maintainer 2020-10-02T01:29:11+00:00

Affected: crates.io: term

The author of the `term` crate does not have time to maintain it and is looking for a new maintainer.

Some maintained alternatives you can potentially switch to instead, depending on your needs:

- [`crossterm`](https://github.com/crossterm-rs/crossterm) - [`termcolor`](https://crates.io/crates/termcolor) - [`yansi`](https://crates.io/crates/yansi)

 2018-11-19T12:00:00+00:00 https://cve.radiocsirt.org/vuln/rustsec-2018-0016 RUSTSEC-2018-0016 — quickersort is deprecated and unmaintained 2020-10-02T01:29:11+00:00

Affected: crates.io: quickersort

The author of the `quickersort` crate has deprecated it and does not recommend using it anymore.

Everything in it has been incorporated into [std::sort_unstable] in the standard library as of Rust 1.20.

[std::sort_unstable]: https://doc.rust-lang.org/stable/std/primitive.slice.html#method.sort_unstable

 2018-06-30T12:00:00+00:00 https://cve.radiocsirt.org/vuln/rustsec-2018-0017 RUSTSEC-2018-0017 — `tempdir` crate has been deprecated; use `tempfile` instead 2020-10-02T01:29:11+00:00

Affected: crates.io: tempdir

The [`tempdir`](https://crates.io/crates/tempdir) crate has been deprecated and the functionality is merged into [`tempfile`](https://crates.io/crates/tempfile).

 2018-02-13T12:00:00+00:00 https://cve.radiocsirt.org/vuln/rustsec-2019-0032 RUSTSEC-2019-0032 — crust repo has been archived; use libp2p instead 2020-10-02T01:29:11+00:00

Affected: crates.io: crust

** The `crust` crate repo was archived with no warning or explanation.**

Given that it was archived with no warning or successor, there's not an official replacement but [`rust-libp2p`](https://github.com/libp2p/rust-libp2p) looks like it's got a similar feature set and is actively maintained.

 2019-11-21T12:00:00+00:00 https://cve.radiocsirt.org/vuln/rustsec-2020-0003 RUSTSEC-2020-0003 — rust_sodium is unmaintained; switch to a modern alternative 2020-10-02T01:29:11+00:00

Affected: crates.io: rust_sodium

The `rust_sodium` crate is no longer maintained by its current owner, who advise in the repository readme that they are looking for someone else to take ownership of it.

We recommend you switch to an alternative crate such as: - [`sodiumoxide`](https://crates.io/crates/sodiumoxide)

 2020-01-20T12:00:00+00:00 https://cve.radiocsirt.org/vuln/rustsec-2020-0010 RUSTSEC-2020-0010 — tiberius is unmaintained 2020-10-02T01:29:11+00:00

Affected: crates.io: tiberius

The author of `tiberius` has archived the GitHub repository and left the following note:

> I do not have the time to overhaul the library and do not intend to further > maintain the 0.3 version relying on the old futures ecosystem.

Suggested alternatives are:

- [`odbc`](https://crates.io/crates/odbc) - [`sqlx`](https://github.com/launchbadge/sqlx/issues/116) (forthcoming)

 2020-02-28T12:00:00+00:00