RUSTSEC-2025-0115 tandem_http_server is unmaintained
The tandem_http_server library is unmaintained and archived, requiring users to migrate to the Polytune alternative to ensure security.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- None listed
What is RUSTSEC-2025-0115?
RUSTSEC-2025-0115 is a vulnerability in tandem_http_server, published on 10 Nov 2025.
Official description
The tandem crates in https://github.com/sine-fdn are no longer maintained by the SINE Foundation. The repository has been archived.
Recommended alternative
We are continuing our work on SMPC by implementing our secure multi-party computation engine Polytune.
Which versions are affected by RUSTSEC-2025-0115?
1 open source package ship an affected version, including tandem_http_server.
| Package | Affected | Fixed in |
|---|---|---|
tandem_http_server crates.io | From 0.0.0-0 | None |
How do I fix RUSTSEC-2025-0115?
No fix has been published for RUSTSEC-2025-0115 yet. Limit exposure of the affected software until one is available.
Is RUSTSEC-2025-0115 being exploited?
There is no known exploitation of RUSTSEC-2025-0115 in the wild and no public exploit code.