RUSTSEC-2024-0397 `conrod` is unmaintained
The conrod crate is unmaintained and deprecated, posing supply chain risks; developers should remove it from dependencies.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- None listed
What is RUSTSEC-2024-0397?
RUSTSEC-2024-0397 is a vulnerability in conrod, published on 26 Jan 2024.
Official description
The crate conrod has been deprecated since version 0.62.0 released in December 2018. The functionality was split across multiple different crates, with the core functionality being transferred to conrod_core. An overview can be found in the conrod repository.
If you have this crate in your dependency tree, this is very likely by mistake and should be corrected.
Which versions are affected by RUSTSEC-2024-0397?
1 open source package ship an affected version, including conrod.
| Package | Affected | Fixed in |
|---|---|---|
conrod crates.io | From 0.0.0-0 | None |
How do I fix RUSTSEC-2024-0397?
No fix has been published for RUSTSEC-2024-0397 yet. Limit exposure of the affected software until one is available.
Is RUSTSEC-2024-0397 being exploited?
There is no known exploitation of RUSTSEC-2024-0397 in the wild and no public exploit code.