RUSTSEC-2023-0051 `dlopen_derive` is unmaintained
The dlopen_derive crate is unmaintained, posing supply chain risks; developers should migrate to dlopen2_derive.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- None listed
What is RUSTSEC-2023-0051?
RUSTSEC-2023-0051 is a vulnerability in dlopen_derive, published on 30 Jul 2023.
Official description
dlopen_derive hasn't been updated since June 9, 2019.
dlopen_derive depends on quote = "0.6.12" and syn = "0.15.34". Versions 1.0.0 of these dependencies were published on August 13, 2019. The 0.* versions haven't received updates since.
Note that dlopen is an unmaintained crate from the same repository as dlopen_derive. However, migrating away from dlopen_derive implies migrating away from dlopen, as well.
Recommended alternatives
dlopen2_derive(anddlopen2)
Which versions are affected by RUSTSEC-2023-0051?
1 open source package ship an affected version, including dlopen_derive.
| Package | Affected | Fixed in |
|---|---|---|
dlopen_derive crates.io | From 0.0.0-0 | None |
How do I fix RUSTSEC-2023-0051?
No fix has been published for RUSTSEC-2023-0051 yet. Limit exposure of the affected software until one is available.
Is RUSTSEC-2023-0051 being exploited?
There is no known exploitation of RUSTSEC-2023-0051 in the wild and no public exploit code.