RUSTSEC-2024-0004 `cosmwasm` is unmaintained
The cosmwasm crate is unmaintained and should be removed from dependencies to avoid supply chain risks.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- None listed
What is RUSTSEC-2024-0004?
RUSTSEC-2024-0004 is a vulnerability in cosmwasm, published on 20 Jan 2024.
Official description
The crate cosmwasm is not used anymore since spring 2020.
The functionality was split in multiple different crates, such as the standard library cosmwasm-std and the virtual machine cosmwasm-vm. An overview can be found in the cosmwasm repository.
If you have this crate in your dependency tree, this is very likely by mistake and should be corrected.
Which versions are affected by RUSTSEC-2024-0004?
1 open source package ship an affected version, including cosmwasm.
| Package | Affected | Fixed in |
|---|---|---|
cosmwasm crates.io | From 0.0.0-0 | None |
How do I fix RUSTSEC-2024-0004?
No fix has been published for RUSTSEC-2024-0004 yet. Limit exposure of the affected software until one is available.
Is RUSTSEC-2024-0004 being exploited?
There is no known exploitation of RUSTSEC-2024-0004 in the wild and no public exploit code.