RUSTSEC-2021-0140 rusttype is Unmaintained

Not scored Published

The rusttype crate is unmaintained and deprecated, posing supply chain risks; developers should migrate to ab_glyph.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Not stated
Victim action needed
Not needed
Fix
None listed

What is RUSTSEC-2021-0140?

RUSTSEC-2021-0140 is a vulnerability in rusttype, published on 1 Apr 2021.

Official description

The maintainer has advised this crate is deprecated and will not receive any maintenance.

The maintainer has further advised to migrate over to ab_glyph.

Last release seems to have been over two years ago.

Possible Alternative(s)

The below list has not been vetted in any way and may or may not contain alternatives;

Which versions are affected by RUSTSEC-2021-0140?

1 open source package ship an affected version, including rusttype.

PackageAffectedFixed in
rusttype crates.ioFrom 0.0.0-0None

How do I fix RUSTSEC-2021-0140?

No fix has been published for RUSTSEC-2021-0140 yet. Limit exposure of the affected software until one is available.

Is RUSTSEC-2021-0140 being exploited?

There is no known exploitation of RUSTSEC-2021-0140 in the wild and no public exploit code.

Sources

Is RUSTSEC-2021-0140 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free