RUSTSEC-2022-0071 Rusoto is unmaintained
Rusoto is unmaintained and deprecated, requiring users to migrate to the official AWS SDK for Rust to ensure security and support.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- None listed
What is RUSTSEC-2022-0071?
RUSTSEC-2022-0071 is a vulnerability in rusoto_credential, published on 24 Apr 2022.
Official description
The maintainers of Rusoto advise that all its crates are deprecated. This includes the common crates rusoto_core, rusoto_signature, rusoto_credential, and service crates such as rusoto_s3 and rusoto_ec2.
Users should migrate to the AWS SDK for Rust, which is maintained by AWS.
Which versions are affected by RUSTSEC-2022-0071?
1 open source package ship an affected version, including rusoto_credential.
| Package | Affected | Fixed in |
|---|---|---|
rusoto_credential crates.io | From 0.0.0-0 | None |
How do I fix RUSTSEC-2022-0071?
No fix has been published for RUSTSEC-2022-0071 yet. Limit exposure of the affected software until one is available.
Is RUSTSEC-2022-0071 being exploited?
There is no known exploitation of RUSTSEC-2022-0071 in the wild and no public exploit code.