RUSTSEC-2021-0099 Crate has been renamed to `cosmrs`
The cosmos_sdk crate was renamed to cosmrs, requiring developers to update dependencies to maintain supply chain integrity.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- None listed
What is RUSTSEC-2021-0099?
RUSTSEC-2021-0099 is a vulnerability in cosmos_sdk, published on 25 Aug 2021.
Official description
The cosmos_sdk crate, which provides a basic Rust SDK for the Cosmos ecosystem,
has rebranded to “CosmRS” in the spirit of other projects like CosmJS and CosmWasm.
You can find the new home here:
https://github.com/cosmos/cosmos-rust/tree/main/cosmrs
The new crate name is cosmrs:
Which versions are affected by RUSTSEC-2021-0099?
1 open source package ship an affected version, including cosmos_sdk.
| Package | Affected | Fixed in |
|---|---|---|
cosmos_sdk crates.io | From 0.0.0-0 | None |
How do I fix RUSTSEC-2021-0099?
No fix has been published for RUSTSEC-2021-0099 yet. Limit exposure of the affected software until one is available.
Is RUSTSEC-2021-0099 being exploited?
There is no known exploitation of RUSTSEC-2021-0099 in the wild and no public exploit code.