RUSTSEC-2022-0104 `structopt` is in maintenance mode
The structopt library is in maintenance mode with no new development, requiring users to migrate to clap for continued support.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- None listed
What is RUSTSEC-2022-0104?
RUSTSEC-2022-0104 is a vulnerability in structopt, published on 8 Feb 2022.
Official description
structopt has been in maintenance mode, with no new development planned, since at least February of 2022.
The status of structopt is discussed in a pinned issue.
Recommended alternative
The structopt derive wrapper was incorporated into clap v3. There is a migration guide for switching from structopt to clap.
Which versions are affected by RUSTSEC-2022-0104?
1 open source package ship an affected version, including structopt.
| Package | Affected | Fixed in |
|---|---|---|
structopt crates.io | From 0.0.0-0 | None |
How do I fix RUSTSEC-2022-0104?
No fix has been published for RUSTSEC-2022-0104 yet. Limit exposure of the affected software until one is available.
Is RUSTSEC-2022-0104 being exploited?
There is no known exploitation of RUSTSEC-2022-0104 in the wild and no public exploit code.