RUSTSEC-2025-0134

See a problem?
Please try reporting it to the source first.

Source

https://rustsec.org/advisories/RUSTSEC-2025-0134

Import Source

https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2025-0134.json

JSON Data

https://api.test.osv.dev/v1/vulns/RUSTSEC-2025-0134

Published

2025-11-28T12:00:00Z

Modified

2025-12-05T19:16:10.786319Z

Summary

rustls-pemfile is unmaintained

Details

The rustls-pemfile crate is no longer maintained. The repository has been archived since August 2025, and users are encouraged to depend directly on the underlying PEM parsing code included in rustls-pki-types since 1.9.0. The latest version of rustls-pemfile is in fact a thin wrapper around the same code used in rustls-pki-types, so migrating should be straightforward.

The new API is represented by the <code>PemObject</code> trait, which provides methods for reading a single or multiple PEM objects from a file or byte slice.

Database specific

{
    "license": "CC0-1.0"
}

References

Affected packages

crates.io / rustls-pemfile

Package

Name: rustls-pemfile; View open source insights on deps.dev
Purl: pkg:cargo/rustls-pemfile

Affected ranges

Type: SEMVER
Events: Introduced

0.0.0-0

Ecosystem specific

{
    "affects": {
        "os": [],
        "arch": [],
        "functions": []
    },
    "affected_functions": null
}

Database specific

informational

"unmaintained"

cvss

null