RUSTSEC-2024-0390 minitrace is Unmaintained
The minitrace library is unmaintained, posing supply chain risks; users should migrate to the maintained fastrace alternative.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- None listed
What is RUSTSEC-2024-0390?
RUSTSEC-2024-0390 is a vulnerability in minitrace, published on 14 Aug 2024.
Official description
The minitrace maintainers have decided to continue the development of minitrace under a new organizational structure to improve community governance.
In the meantime, minitrace will no longer be maintained. For more details, refer to tikv/minitrace-rust#229.
Possible Alternative(s)
fastrace is maintained by the same team responsible for minitrace, and users are encouraged to migrate to fastrace.
Which versions are affected by RUSTSEC-2024-0390?
1 open source package ship an affected version, including minitrace.
| Package | Affected | Fixed in |
|---|---|---|
minitrace crates.io | From 0.0.0-0 | None |
How do I fix RUSTSEC-2024-0390?
No fix has been published for RUSTSEC-2024-0390 yet. Limit exposure of the affected software until one is available.
Is RUSTSEC-2024-0390 being exploited?
There is no known exploitation of RUSTSEC-2024-0390 in the wild and no public exploit code.