RUSTSEC-2024-0395 The maintainer of chrono-english is unresponsive
Unmaintained Rust library causes compilation failures with newer dependencies, requiring migration to a maintained fork.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- None listed
What is RUSTSEC-2024-0395?
RUSTSEC-2024-0395 is a vulnerability in chrono-english, published on 24 Jun 2024.
Official description
All versions will encounter compilation errors with a chrono version >0.4.35, due
to backward incompatible API changes.
User conradludgade reworked the original crate and created a fork with the same API surface called interim.
The fork is better structured and passes the same test suite as chrono-english, ensuring backward compatibility.
Which versions are affected by RUSTSEC-2024-0395?
1 open source package ship an affected version, including chrono-english.
| Package | Affected | Fixed in |
|---|---|---|
chrono-english crates.io | From 0.0.0-0 | None |
How do I fix RUSTSEC-2024-0395?
No fix has been published for RUSTSEC-2024-0395 yet. Limit exposure of the affected software until one is available.
Is RUSTSEC-2024-0395 being exploited?
There is no known exploitation of RUSTSEC-2024-0395 in the wild and no public exploit code.