GHSA-pp8r-vv2j-9j5v traitobject is Unmaintained

Not scored Published

The traitobject library is unmaintained and has unpatched security advisories, requiring users to migrate to alternatives.

Exploited in the wild
Not known
Login needed
Not stated
Attackable
Not stated
Victim action needed
Not stated
Fix
None listed

What is GHSA-pp8r-vv2j-9j5v?

GHSA-pp8r-vv2j-9j5v is a vulnerability in traitobject, published on 4 Oct 2021.

Official description

Crate traitobject has not had a release for over five years.

In addition there is an existing security advisory that has not been addressed:

Possible Alternative(s)

The below list has not been vetted in any way and may or may not contain alternatives;

Which versions are affected by GHSA-pp8r-vv2j-9j5v?

3 open source packages ship an affected version, including traitobject.

PackageAffectedFixed in
traitobject crates.ioAll versionsNone
traitobject crates.ioAll versionsNone
traitobject crates.ioFrom 0.0.0-0None

How do I fix GHSA-pp8r-vv2j-9j5v?

No fix has been published for GHSA-pp8r-vv2j-9j5v yet. Limit exposure of the affected software until one is available.

Is GHSA-pp8r-vv2j-9j5v being exploited?

There is no known exploitation of GHSA-pp8r-vv2j-9j5v in the wild and no public exploit code.

Sources

Also known as RUSTSEC-2021-0144.

Is GHSA-pp8r-vv2j-9j5v in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free